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MARK FORMING APPARATUS, METHOD 
OF FORMING LASER MARK ON OPTICAL 
DISK, REPRODUCING APPARATUS, 
OPTICAL DISK AND METHOD OF 
PRODUCING OPTICAL DISK 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to a marking forming 
apparatus, a method of forming a laser marking to an optical 
disk, a reproduction apparatus, an optical disk, and a method 
of manufacturing an optical disk, which may be utilized, for 
example, to prevent duplication of optical disks. 

2. Description of the Prior Art 

With increasing use of ROM-type optical disks in recent 
years, pirated disks have also been spreading, infringing the 
rights of copyright owners. 

This is because ROM disk manuf acturing apparatus have 
been made readily available and also have become easy to 
operate. 

A pirate can make a CD master disk just by extracting 
logic data from software contained on a CD, copying it onto 
a magnetic tape, and setting the tape on a mastering appa- 
ratus. Hundreds of thousands of pirated disks can be pressed 
from this single master disk. Since pirates do not. pay 
royalties, they make a profit by selling pirated disks at a low 
price. This necessarily means a financial loss to the copy- 
right owner. 

According to the current CD specification, only the func- 
tion of reading logic data from a CD is provided, but no 
functions are provided to detect physical features of a disk. 
As a result, a pirated CD can be easily produced by 
bit-copying the logic data 

The prior art discloses a method of preventing piracy by 
adding a function to recognize disk physical features. 

This method involves establishing a new specification 
that defines the inclusion of a physical mark on a master disk 
to prevent the pirating of disks made to this specification. As 
an example of the prior art. a piracy prevention method is 
known such as the one disclosed in Japanese Patent Unex- 
amined Publication No. 5-325193. According to that 
method, in the cutting process the recording beam is delib- 
erately swept in the tracking direction, when recording a 
designated region, to form a wobbling on the master disk. 
When the disk is played back on a reproduction apparatus 
equipped with a wobbling detection circuit, the disk is 
checked to see whether the wobbling is formed in the 
designated region. If it is detected that the wobbling of a 
designated wobbling frequency is formed in the designated 
region, the disk is judged to be a legitimate disk; otherwise, 
the disk is judged to be a pirated disk. 

More specifically, based on predefined physical mark 
design data, a physical mark is formed on the masker disk 
by using a special mastering apparatus equipped with a 
wobbling function. This prevents pirates from making 
pirated disks since they do not have such special mastering 
apparatus nor physical mark design data. Such an anti-piracy 
mark needs to be formed on every disk made to this 
specification. However, since it is possible to extract this 
physical mark by examining a legitimate disk, the prior art 
method has had the problem that pirated disks may be made 
if such a special mastering apparatus falls into the hands of 
an illegal person. In this patent specification, piracy preven- 
tion methods of the type that forms a physical mark on the 
master disk will be referred to as master disk level methods. 
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Besides the above-described method, there has been pro- 
posed a more sophisticated master disk level method which 
involves forming a more complicated physical mark. On the 
other hand, a replica method is known that makes a replica 
having exactly the same physical features by melting the 
resin of a legitimate disk no matter how complicated the 
physical mark is made at the master disk level. This method 
requires much time and cost to produce one master disk, but 
since hundreds of thousands of disks can be produced from 
one pirated master disk, the cost per pirated disk is low. This 
has therefore given rise to the problem that as the replica 
method becomes widespread in the future, it may defeat the 
effectiveness of piracy prevention techniques at the master 
disk level. 

As described above, the prior art piracy prevention tech- 
niques have several problems to be overcome. 

These problems are summarized below. 

Problem 1: The effectiveness of the master disk level 
piracy prevention techniques of the prior art is low since it 
is possible to replicate the physical mark. 

Problem 2: In the prior art method that forms a physical 
mark based on physical mark design data, if a manufacturing 
apparatus of the same precision as the apparatus used by the 
legitimate disk manufacturer is obtained, illegal disks can be 
easily manufactured. 

Problem 3 : Since the security level provided by the prior 
art piracy prevention methods is fixed, its effectiveness 
decreases against constantly improving pirating techniques. 

Problem 4: If a disk format without copy protection were 
allowed to exist along with a disk format with copy 
protection, pirated disks could be made with the disk format 
without copy protection. It has therefore been necessary to 
produce all disks with copy protection. The use of copy 
protection is therefore limited to closed specifications such 
as game disks. 

Problem 5: According to the prior art methods, a limited 
number of licensing companies possess the special manu- 
facturing apparatus and do not make the apparatus public. 
Therefore, software makers cannot make disks except at the 
licensing companies. 

Problem 6: In the master-disk marking method, all disks' 
pressed from the same master disk have the same disk ID. 
This means that all disks can be run by using the same 
password. As a result password security cannot be main- 
tained unless a floppy disk or a communication line is used 
in combination. Furthermore, the password has to be entered 
each time the disk is used since secondary recording is not 
possible. 

SUMMARY OF THE INVENTION 

In view of the above-outlined problems of the prior art, it 
is an object of the present invention to achieve a greatly 
improved copy prevention capability as compared to the 
prior art 

More specifically, the present invention provides the 
following means to overcome the above-outlined six prob- 
lems of the prior art piracy prevention methods. 

To overcome Problem 1. a piracy prevention method 
involving the use of a physical mark at a reflective film level, 
rather than the master disk level physical mark as used in the 
prior art. is provided wherein the physical mark is formed on 
a reflective film of a disk. This prevents the production of 
pirated disks if duplication is made at the master disk level. 

To overcome Problem 2, a new ROM-recording means is 
used that performs secondary recording to a two-disk iami- 
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nated ROM disk by using a laser. In a first step, physical 
marks are randomly formed, and in a second step, the 
physical marks are measured with a measuring accuracy as 
high as 0. 13 urn. In a third step, their position information 
is encrypted and. using the secondary recording means, a 
barcode is recorded to the ROM disk with an accuracy of 
several tens of microns which is the usual processing 
accuracy. Optical mark position information can thus be 
obtained with an accuracy of, for example. 0.1 urn much 
higher than the processing accuracy of a conventional appa- 
ratus. Since optical marks cannot be formed with the accu- 
racy of 0.1 um by using commercially available equipment, 
production of pirated disks can be prevented. 

To overcome Problem 3. both a first-generation cipher 
with alow degree of security and a second-generation cipher 
with a high degree of security, each enciphering the position 
information with a digital signature, are prerecorded on a 
medium and by using such a medium, piracy is prevented 
with the security corresponding to the applicable generation 
if the design of reproduction apparatus changes from one 
generation to the next. 

To overcome Problem 4, an anti-piracy function identifier 
for indicating whether or not the software product is 
equipped with a copyright anti-piracy function is recorded 
on the master disk. To prevent the identifier from being 
altered, compressed information of software contents: and 
the anti-piracy function identifier are scrambled and 
encrypted together when recording the software contents on 
the master disk. Since the identifier cannot be altered, pirates 
cannot produce disks with a disk format without anti-piracy 
measures. This prevents the production of pirated- disks. 

To overcome Problem 5. as a secret key for digital 
signature encryption indispensable for the manufacture of 
disks, a subkey is generated from a master key. and the 
subkey is delivered to each software maker, thereby allow- 
ing the software maker to manufacture legitimate disks at its 
own factory. 

To overcome Problem 6. position Mormation of an 
anripiracy mark of the invention, which differs from one disk 
to another, is used as a disk identifier. The position infor- 
mation and the disk serial number. Le.. the disk H>. are 
combined and encrypted together with a digital signature, 
thus appending an unalterable disk H> to each disk. Since 
each completed disk has a different ID, the password is also 
different The password does not work on other disks. This 
enhances password security. 

Also, with the secondary recording of the invention, the 
password is secondary-recorded on the disk, permanently 
making the disk an operable disk. 

Specific methods for overcoming the above six problems 
are disclosed below by way of embodiments. 

The invention provides a marking forming apparatus 
comprising: marking forming means for applying at least 
one marking to at least one reflective film formed to a disk; 
marking position detecting means for detecting at least one 
position of said marking; and position information output 
means for outputting said detected position as position 
information of said marking. 

The invention also provides a marking forming apparatus , 
further comprising position information writing means for 
writing at least said output position information or informa- 
tion concerning said position information to said disk or to 
a different medium. 

The invention also provides a method of fonning a laser 
marking to an optical disk, comprising the steps of: forming 
at least one disk; forming a reflective film to said formed 



4 

disk; laminating two disks together, said disks including at 
least one disk with said reflective film formed thereon; and 
forming at least one marking by a laser on said reflective 
layer of the laminated disks. 

The invention also provides a reproduction apparatus 
comprising: position information reading means for reading 
position information of at least one marking or information 
concerning said position information, said marking being 
formed to at least one reflective film formed to a disk and 
being detected for a position thereof, at least the position 
thus detected being output as said position information of 
said marking; marking reading means for reading informa- 
tion concerning at least one actual position of said marking; 
comparing/judging means for performing comparison and 
judgement by using a result of reading by said position 
information reading means and a result of reading by said 
marking reading means: and reproducing means for repro- 
ducing recorded data on said optical disk in accordance with 
a result of the comparison and judgement performed by said 
comparing/judging means. 

The invention also provides a method of manufacturing 
an optical disk, comprising the steps of: forming at least one 
disk; foiming a reflective film to said formed disk; applying 
at least one marking to said reflective film; detecting at least 
one position of said marking; and outputting said detected 
position as position information of said marking, and 
encrypting said information for writing to said disk. 

The invention also provides a method of manufacturing 
an optical disk, comprising the steps of: forming at least one 
disk; forming a reflective film to said formed disk; applying 
at least one marking to said reflective film; detecting at least 
one position of said marking; and outputting said detected 
position as position information of said marking, and apply- 
ing a digital signature in relation to said position information 
, for writing to said disk. 

The invention also provides an optical disk wherein at 
least one marking is formed by a laser to at least one 
reflective film of the disk holding data written thereon and 
at least position information of said marking or information 
concerning said position information is written to said disk 
in an encrypted form or with a digital signature applied 
thereto. 

The invention also provides an optical disk having a 
structure such that at least one reflective film is sandwiched 
directly or indirectly between two members formed from 
material resistant to laser light, wherein at least one marking 
is formed by a laser to said reflective film, 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a diagram showing a disk manufacturing process 
and a secondary recording process according to the present 
embodiment; FIG. 2(a) is a top plan view of a disk according 
to the embodiment, (b) is a top plan view of the disk 
according to the embodiment, (c) is a top plan view of the 
disk according to the embodiment, (d) is a transverse sec- 
tional view of the disk according to the embodiment, and (e) 
is a waveform diagram of a reproduced signal according to 
the embodiment; 

FIG. 3 is a flowchart illustrating a process of recording 
encrypted position information on a disk in the form of a 
barcode according to the present embodiment; 

FIG. 4 is a diagram showing a disk fabrication process 
and a secondary recording process (part 1) according to the 
present embodiment; 

FIG. 5 is a diagram showing the disk fabrication process 
and the secondary recording process (part 2) according to 
the present embodiment; 
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FIG. 6 is a diagram showing a two-layer disk fabrication 
process (part 1) according to the present embodiment: 

FIG. 7 is a diagram showing the two-layer disk fabrication 
process (part 2) according to the present embodiment; FIG. 
8(a) is an enlarged view of a nonreflective portion of a 
laminated type according to the present embodiment, and (b) 
is an enlarged view of a nonreflective portion of a single- 
plate type according to the present embodiment; 

FIG. 9(a) is a reproduced-waveform diagram for a non- 
reflective portion according to the present embodiment, (b) 
is a reproduced- waveform diagram for a nonreflective por- 
tion according to the present ernbodiment. and (c) is a 
reproduced-waveform diagram for a nonreflective portion 
according to the present embodiment; 

FIG. 10(a) is a cross-sectional view of a nonreflective 
portion of the laminated type according to the present 
embodiment, and (b) is a cross-sectional view of a nonre- 
flective portion of the single-plate type according to the 
present embodiment; 

FIG. 11 is a schematic diagram* based on an observation 
through a transmission electron microscope, illustrating a 
cross section of the nonreflective portion according to the 
present embodiment; 

FIG. 12(a) is a cross-sectional view of a disk according to 
the present embodiment and (b) is a crosssectional view of 
the nonreflective portion of the disk according to the present 
embodiment; 

FIG. 13(a) is a diagram showing a physical arrangement 
of addresses on a legitimate CD according to the 
embodiment, and (b) is a physical arrangement of addresses 
on an illegally duplicated CD according to the embodiment; 

FIG. 14 is a block diagram for disk manufactxtring accord- 
ing to the embodiment; 

FIG. 15 is a block diagram of a low-reflectivity position 
detector according to the embodiment; 

FIG. 16 is a diagram illustrating the principle of detecting 
address/clock positions of a low-reflectivity portion accord- 
ing to the embodiment; 

FIG. 17 is a diagram showing a comparison of low- 
reflectivity portion address tables for a legitimate disk and a 
duplicated disk; 

FIG. 18 is a flowchart illustrating a disk check procedure 
using a one-direction function according to the embodiment; 

FIG. 19 is a diagram showing a comparison of address 
coordinate positions on different master disks according to 
the ernbodiment; 

FIG. 20 is a flowchart illustrating a low-reflectivity posi- 
tion detecting program according to the embodiment; 

FIG. 21 is a block diagram of a magnetic recording 
apparatus according to the embodiment; 

FIG. 22 is a flowchart illustrating a procedure for 
encryption, etc, using an RSA function according to the 
embodiment; FIG. 23 is a flowchart illustrating a procedure 
for digital signature, etc. using an elliptic function according 
to the embodiment; 

FIG. 24 is a flowchart illustrating a position information 
check process according to the embodiment: 

FIG. 25 is a block diagram of an information processing 
apparatus according to the embodiment; 

FIG. 26 is a top plan view of a second low-reflectivity 
portion according to the embodiment; 

FIG. 27 is a diagram showing a detected waveform of a 
first-layer marking signal according to the present embodi- 
ment; 
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FIG- 28 is a diagram showing a detected waveform of a 
second-layer marking signal according to the present 
embodiment; 

FIG. 29 is a block diagram of a disk manufacturing 
apparatus according to the present embodiment: 

FIG. 30 is a code diagram for a nonreflective portion 
according to the present embodiment; 

FIG. 31 is a diagram showing a detected waveform from 
j the nonreflective portion according to the present embodi- 
ment; 

FIG. 32 is a diagram for explaining the contents of 
barcode recorded information and the relative relationship 
thereof according to the present embodiment; 

FIG. 33 is a perspective view showing the nonreflective 
portion formed in the two-layer disk according to the present 
embodiment; 

FIG. 34 is a diagram for explaining data flow in disk 
distribution according to the present embodiment; 

FIG. 35 is a diagram showing a process of disk distribu- 
tion according to the present embodiment; 

FIG, 36 is a block diagram for explaining a manufacturing 
process when applying complex encryption to position 
information, etc. by using a master key. subkey, etc. accord- 
ing to the present embodiment; 

FIG. 37 is a block diagram for explaining the manufac- 
turing process when applying complex encryption to posi- 
tion information, etc. by using the master key. subkey, etc. 
according to the present embodiment; 

FIG. 38 is a flowchart in a reproduction apparatus accord- 
ing to the present embodiment; 

FIG. 39 is a diagram showing a secret key cipher and a 
public key cipher used in combination on optical disks and 
their relationship with reproduction apparatus according to 
the present embcKiiment; 

FIG. 40 is a block diagram showing an outline of a 
process of recording position information, etc., encrypted 
with a master key. subkey. etc., on an optical disk and a 
process of reproducing such Mormation according to the 
present embodiment; 

FIG. 41 is a block diagram of an optical disk reproduction 
apparatus according to the present embodiment; and 

FIG. 42 is a flowchart illustrating the function of a 
scramble identifier and the switching between drive ID and 
disk ID in a program installation process according to the 
present embodiment. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

The constitution and operation of a marking forming 
apparatus, a method of forming a laser marking to an optical 
disk, a reproduction apparatus, an optical disk, and a method 
of manufacturing an optical disk will be described below in 
accordance with an embodiment of the present invention. 

In the description of the present embodiment given 
herein, the first half part (1) deals with such operations as 
manufacturing a disk, forming a marking by using a laser, 
reading position information of the marking, performing 
encryption and other processing on the position information, 
etc. for writing on an optical disk, and reproducing the 
optical disk on a player. The encryption and reproduction 
operations are briefly described in the first part (1). 

Next, in the second half part (2), the encryption and other 
processing of the marking position information, etc. and the 
decryption and reproduction of the position information, etc. 
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on the optical disk, briefly described in the first part (1). wil 
be described in further detail. The second part (2) also deak 
with various techniques for preventing piracy. 

In this patent specification, laser trimming is also referred 
to as laser marking, while a nonreflective optical marking 
portion is simply referred to as the marking or optical 
marking or, sometimes, as the physical ID unique to the disk. 
(1) FIG. 1 is a flowchart illustrating a general process flow 
from disk manufacturing to the completion of an optical 
disk. 

First, the software company performs software authoring 
in software production process 820. The completed software 
is delivered from the software company to the disk manu- 
facturing factory. In disk manufacturing process 816 at the 
disk manufacturing factory, the completed software is input 
in step 8I&2, a master disk is produced (step 81 8b). disks are 
pressed (steps 818*, 818g), reflective films are formed on the 
respective disks (steps 818/. SISh). the two disks are lami- 
nated together (step 818/), and a ROM disk such as a DVD 
or CD is completed (step 818m. etc.). 

The thus completed disk 800 is delivered to the software 
maker or to a factory under control of the software maker, 
where, in secondary recording process 817. an anti-piracy 
marking 584, such the one shown in FIG. 2. is formed (step 
819a). and accurate position information of this mark is read 
by a measuring means (step 819b) to obtain the position 
information which serves as the physical feature information 
of the disk. This physical feature information of the disk is 
encrypted in step 819c. The encrypted information is con- 
verted to a PWM-modulated signal which is then recorded 
in step 8 19 d as a barcode signal on the disk by using a laser. 
The disk physical feature information may be combined 
together with software feature information for encryption in 
step 819c. 

The above processes will be described in further detail. 
ITiat is. a disk fabrication process, a marking formation 
process, a marking position reading process, and an 
encrypted information writing process for an optical disk 
according to the present invention will be described in detail 
with reference to FIGS. 4 and 5 and FIGS. 8 to 12. A 
supplementary explanation will also be given dealing with a 
disk having two reflective layers with reference to FIGS. 6 
and 7. In the following description, the marking formation 
process and the marking position reading process are col- 
lectively called the secondary recording process. 

(A) First, the disk fabrication process will be described. In 
the disk fabrication process 806 shown in FIG. 4, first a 
transparent substrate 801 is pressed in step (1). In step (2), 

a metal such as aluminum or gold is sputtered to form a : 
reflective layer 802. An adhesive layer 804 formed from an 
ultraviolet curing resin is applied by spin coating to a 
substrate 803 formed in a different processing step, and the 
substrate 803 is bonded to the transparent substrate 801 
having the reflective layer 802, and they are rotated at high 
speed to make the bonding spacing uniform By exposure to 
external ultraviolet radiation, the resin hardens, thus firmly 
bonding the two substrates together. In step (4). a printed 
layer 805 where a CD or DVD title is printed, is printed by 
screen printing or offset printing. Thus, in step (4), the 
ordinary laminated-type optical ROM disk is completed. 

(B) Next the marking formation process will be described 
with reference to FIGS. 4 and 5. In HG. 4. a laser beam from 
a pulsed laser 813 such as a YAG laser is focused through 
a converging lens 814 onto the reflective layer 802. to form 
a nonreflective portion 815 as shown in step (6) in FIG. 5. 
That is. a distinct waveform, such as the waveform (A) 
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shown in step (7), is reproduced from the nonreflective 
portion 815 formed in step (6) in FIG. 5. By slicing this 
waveform, a marking detection signal such as shown by 
waveform (B) is obtained, from which hierarchiai marking 
position information comprising an address, such as shown 
in signal (d). and an address, a frame synchronizing signal 
number, and a reproduced clock count, such as shown in 
signal (e). can be measured. 

As previously stated, a supplementary explanation will be 
given below of an alternative type of disk (a two-layer 
laminated disk) with reference to FIGS. 6 and 7. 

FIGS. 4 and 5 showed a disk generally known as a 
single-layer laminated disk which has a reflective layer only 
on one substrate 801. On the other hand, FIGS. 6 and 7 show 
a disk generally known as a two- layer laminated disk which 
has reflective layers on both substrates 801 and 803. For 
laser trimming, the processing steps (5) and (6) are funda- 
mentally the same for both types of disks, except with 
significant differences which are briefly described below. 
First while the single-layer disk uses a reflective layer 
formed from an aluminum film having reflectivity as high as 
70% or over, in the two-layer disk the reflective layer 801 
formed on the reading-side substrate 801 is a semitranspar- 
ent gold (Au) film having a reflectivity of 30%. while the 
reflective layer 802 formed on the print-side substrate 803 is 
the same as that used in the single-layer disk Second, as 
compared with the single-layer disk, the two-layer disk is 
required to have high optical accuracy; for example, the 
adhesive layer 804 must be optically transparent and be 
unifornl in thickness, and the optical transparency must not 
be lost due to laser trimming. FIGS. 7(7). 7(8), and 7(9) 
show the waveform from the first layer of the two-recording- 
layer disk. The waveform from the second layer is similar to 
that from the first layer, though the signal level is lower than 
from the first layer. However, since the first and second 
layers are bonded together, relative positional accuracy 
between them is random and can be controlled only with an 
accuracy of a few hundred microns. As will be described 
later, since the laser beam passes through the two reflective 
films, to make an illegal disk the position informations on 
the first and second layers for the first mark, for example, 
have to be made to match the same value on the legitimate 
disk. But making them match would require a near- 
submicron accuracy in laminating, and consequently, mak- 
ing illegal disks of the two-layer type is practically impos- 
sible. 

The technique for forming the nonreflective optical mark- 
ing portion will be described in further detail in sections (a) 
to (d) below with reference to FIGS. 8 to 12. etc.. dealing 
with the laminated type in comparison with a single-plate 
type. FIGS. 8(a) and (b) are micrographs showing plan 
views of nonreflective optical marking portions, and FIG. 10 
is a simplified schematic cross-sectional view of a nonre- 
flective portion of the two-layer laminated disk, (a) Using a 
5 jij/pulse YAG laser, a laser beam was applied to a 500- 
angstrom aiurninum layer lying 0,6 mm below the surface of 
a 1.2-mm thick ROM disk consisting of two 0.6-mm thick 
disks laminated together, and, as a result, a 12 um wide 
slit-like nonreflective portion 815 was formed, as shown in 
the X 750 micrograph of FIG. 8(a). In this X 750 
micrograph, no aluminum residues were observed on the 
nonreflective portion 815. Thick swollen aluminum layers, 
2000 angstroms thick and 2 um wide, were observed along 
boundaries between the nonreflective portion 815 and reflec- 
tive portions. As shown in FIG. 10(a), it was confirmed that 
no significant damage had occurred inside. In this case, the 
application of the pulsed laser presumably melted the alu- 
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ininum reflective layer, causing a phenomenon of molten 
aluminum buildup along the boundaries on both sides due to 
the surface tension. We call this a hot melt surface tension 
(HMST) recording method. This is a characteristic phenom- 
enon observed only on a laminated disk 800. FIG. 11 is a 
schematic diagram, based on an observation through a 
transmission electron microscope (TEM). illustrating a cross 
section of the nonreflective portion formed by the above 
laser trimming process. In the figure, if the aluminum film 
swollen portion is 1.3 um wide and 0.20 urn thick, the 
amount of increased aluminum in that portion is L3x(0.20- 
0.05)=0.195 um 2 . The amount of aluminum originally 
deposited in a half portion (5 pm)of the laser exposed region 
(10 um) was 5x0.05=0.250 um 2 . The difference is calculated 
as 0.25(W). 195=0.055 um 2 . In terms of length, this is 
equivalent to 0.055/0.05=1.1 um. This means that an alu- 
minum layer of 0.05 um thickness and 1.1 um length 
remained, and therefore, it can be safely said that almost all 
aluminum was drawn to the film swollen portion. Thus, the 
result of the analysis of the figure also verifies the explana- 
tion about the above-described characteristic phenomenon. 

(b) We will next deal with the case of a single-plate optical 
disk (an optical disk comprising a single disk;. An experi- 
ment was conducted by applying laser pulses of the same 
power to a 0.05 urn thick aluminum reflective film formed 
on a single-sided molded disk, of which result is shown in 
FIG. 8(£>). As shown in the figure, diirninum residues were 
observed, and since these aluminum residues cause repro- 
duction noise, it can be seen that the single-plate type is not 
suitable for secondary recording of optical disk information 
of which a high density and a low error rate are demanded. 
Furthermore, unlike the laminated disk, in the case of the 
single-plate disk, the protective layer 862 is inevitably 
damaged, as shown in FIG. 10(fc), when the nonreflective 
portion is subjected to laser trimming. The degree of damage 
depends on the laser power, but the damage cannot be 
avoided even if the laser power is controlled accurately. 
Moreover, according to our experiment, the printed layer 
805 formed by screen printing to a thickness of a few 
hundred microns on the protective layer 862 was damaged 
when its thermal absorptance was high. In the case of the 
single-plate disk, to address the problem of protective layer 
damage, either the protective layer has to be applied once 
again or the laser cut operation should be performed before 
depositing the protective layer. In any case, the singie-plate 
type may present a problem in that the laser cut process has 
to be incorporated in the pressing process. This limits the 
application of the single-plate disk despite its usefulness. 

(c) A comparison between single-plate disk and laminated 
disk has been described above, using a two-layer laminated 
disk as an example. As is apparent from the above 
description, the same effect as obtained with the two-layer 
laminated disk can be obtained with the single-layer lami- 
nated disk. Using FIGS. 12(a). 12(b). etc.. a further descrip- 
tion will be given dealing with the single-layer type. As 
shown in FIG. 12(a), the reflective layer 802 has the 
transparent substrate 801 of polycarbonate on one side, and 
the hardened adhesive layer 804 and a substrate on the other 
side, the reflective layer 802 thus being hermetically sealed 
therebetween. In this condition, pulsed laser Hg^it is focused 
thereon for heating; in the case of our experiment, heat of 5 
jjj/pulse is applied to a circular spot of 10 to 20 um diameter 
on the reflective layer 802 for a short period of 70 ns. As a 
result, the temperature instantly rises to 600° C. the melting 
point, melting state is caused. By heat transfer, a small 
portion of the transparent substrate 801 near the spot is 
melted and also a portion of the adhesive layer 804 is 
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melted. The molted aluminum in this state is caused by 
surface tension to build up along boundaries 821a and 821b. 
with tension being applied to both sides, thus forming 
buildups 822^ and 82Zb of hardened aluminum, as shown in 
FIG. 12(b). The nonreflective portion 584 free from alumi- 
num residues is thus formed. This shows that a clearly 
defined nonreflective portion 584 can be obtained by laser- 
trimming the laminated disk as shown in FIG. 10(a). Expo- 
sure of the reflective layer to the outside environment due to 
a damaged protective layer, which was the case with the 
single -plate type, was not observed even when the laser 
power was increased more than 10 times the optimum value. 
After the laser trimming, the nonreflective layer 584 has the 
structure shown in FIG. 12(b) where it is sandwiched 
between the two transparent substrates 801 and sealed on 
both sides with the adhesive layer 804 against the outside 
environment, thus producing the effect of protecting the 
structure from environmental effects, 
(d) Another benefit of laminating two disks together will 
, be described next. When secondary recording is made in the 
form of a barcode, an illegal manufacturer can expose the 
aluminum layer by removing the protective layer in the case 
of a single-plate disk, as shown in FIG. 10(b). This gives rise 
to a possibility that nonecrypted data may be tampered with 
. by redepositing an aluminum layer over the barcode portion 
on a legitimate disk and then bser-trirnming a different 
barcode. For example, if the ID number is recorded in 
plaintext or separately from main ciphertext, in the case of 
a single-plate disk it is possible to alter the ID number, 
enabling illegal use of the software by using a different 
password. However, if the secondary recording is made on 
the laminated disk as shown in FIG. 10(a). it is difficult to 
separate the laminated disk into two sides. In addition, when 
removing one side from the other, the aluminum reflective 
film is partially destroyed. When the anti-piracy marking is 
destroyed, the disk will be judged as being a pirated disk and 
will not run. Accordingly, when making illegal alterations to 
the laminated disk, the yield is low and thus illegal alter- 
ations are suppressed for economic reasons. Particuiariy, in 
the case of the two-layer laiminated disk, since the polycar- 
bonate material has temperature/humidity expansion 
coefficients, it is nearly impossible to laminate the two disks, 
once separated, by aligning the anti-piracy markings on the 
first and second layers with an accuracy of a few microns, 
and to mass produce disks. Thus, the two-layer type provides 
a greater effectiveness in piracy prevention. It was thus 
found that a clearly defined slit of a nonreflective portion 
584 can be obtained by laser-trimming the laminated disk 
800. 

The technique for forming the nonreflective optical mark- 
ing portion has been described in (a) to (d) above. 

(C) Next, the process of reading the position of the thus 
formed marking will be described. 

FIG. 15 is a block diagram showing a low reflectivity light 
amount detector 586 for detecting the nonreflective optical 
marking portion, along with its adjacent circuitry, in an 
optical disk manufacturing process. FIG. 16 is a diagram 
illustrating the principle of detecting address/clock positions 
of the low reflectivity portion. For convenience of 
explanation, the following description deals with the oper- 
ating principle when a read operation is performed on a 
nonreflective portion formed on an optical disk constructed 
from a single disk. It will be recognized that the same 
operating principle also applies to an optical disk con- 
structed from two disks laminated together. 

As shown in FIG. 15. the disk 800 is loaded into a 
marking reading apparatus equipped with a low reflectivity 
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position detector 600 to read the marking, and in this case, 
since a signal waveform 823 due to the presence and absence 
of pits and a signal waveform 824 due to the presence of the 
nonreflective portion 584 are significantly different in signal 
level, as shown in the waveform diagram of FIG. 9(a). they 
can be clearly distinguished using a simple circuit. 

The start position and end position of the nonreflective 
portion 564 having the above waveform can be easily 
detected by the low reflectivity light amount detector 586 
shown in the block diagram of FIG. 15. Using the repro- 
duced clock signal as the reference signal, position infor- 
mation is obtained in a low reflectivity position information 
output section 596. 

As shown in FIG. 15. a comparator 587 in the low 
reflectivity light amount detector 586 detects the low reflec- 
tivity light portion by detecting an analog light reproduced 
signal having a lower signal level than a light amount 
reference value 588. During the detection period, a low 
reflectivity portion detection signal of the waveform shown 
in FIG. 16(5) is output The addresses and clock positions of 
the start position and end position of this signal are mea- 
sured. 

The reproduced light signal is waveshaped by a waveform 
shaping circuit 590 having an AGC 590a, for conversion 
into a digital signal. A clock regenerator 38a regenerates a 
clock signal from the waveshaped signal. An EFM demodu- 
lator 592 in a demodulating section 591 demodulates the 
signal, and an ECC corrects errors and outputs a digital 
signal. The EFM-demodulated signal is also fed to a physi- 
cal address output section 593 where an address of MSR 
from Q bits of a subcode in the case of a CD. is output from 
an address output section 594 and a synchronizing signal, 
such as a frame synchronizing signal, is output from a 
synchronizing signal output section 595. From the clock 
regenerator 38a. a demodulated clock is output. 

In a low reflectivity portion address/clock signal position 
signal output section 596, a low reflectivity portion start/end 
position detector 599 accurately measures the start posistion 
and end position of the low reflectivity portion 584 by using 
an (n-1) address output section 597 and an address signal as 
well as a clock counter 598 and a synchronizing clock signal 
or the demodulated clock. This method will be described in 
detail by using the waveform diagrams shown in FIG. 16. As 
shown in the cross- sectional view of the optical disk in FIG. 
16(1). the low reflectivity portion 584 of mark number 1 is 
formed partially. A reflection selope signal such as shown in 
FIG. 16(3), is output, the signal level from the reflective 
portion being lower than the light amount reference value 
588. This is detected by the light level comparator 587, and 
a low reflectivity light detection signal, such as shown in 
FIG. 16(5), is output from the low reflectivity light amount 
detector 586. As shown by a reproduced digital signal in 
FIG. 16(4). no digital signal is output from the mark region 
since it does not have a reflective layer. 

Next, to obtain the start and end positions of the low 
reflectivity light detection signal, the demodulated clock or 
synchronizing clock shown in FIG. 16(6) is used along with 
address information. First, a reference clock 605 at address 
n in FIG. 16(7) is measured. When the address immediately 
preceding the address n is detected by the (n-1) address 
output section 597. it is found that the next sync 604 is a 
sync at address n. The number of clocks from the synch 604 
to the reference clock 605, which is the start position of the 
low reflectivity light detection signal, is counted by the clock 
counter 598. This clock count is defined as a reference delay 
time TD which is measured by a reference delay time TD 
measuring section 608 for storage therein. 
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The circuit delay time varies with reproduction apparatus 
used for reading, which means that the reference delay time 
TD vanes depending on the reproduction apparatus used. 
Therefore, using the TD. a time delay corrector 607 applies 
time correction, and the resulting effect is that the start clock 
count for the low reflectivity portion can be measured 
accurately if reproduction apparatus of different designs are 
used for reading. Next, by finding the clock count and the 
start and end addresses for the optical mark No. 1 in the next 
j track, clock m+14 at address n+12 is obtained, as shown in 
FIG. 16(8). Since TD=m+2, the clock count is corrected to 
12. but for convenience of explanation, n+14 is used. We 
will describe another method, which eliminates the effects of 
varying delay times without having to obtain the reference 
delay time TD in the reproduction apparatus used for read- 
ing. This method can check whether the disk is a legitimate 
disk or not by checking whether the positional relationship 
of mark 1 at address n in FIG. 16(8) relative to another mark 
2 matches or not. That is. TD is ignored as a variable, and 
the difference between the position. Al=al+TD. of mark 1 
measured and the position, A2=a2-fTD, of mark 2 measured 
is obtained, which is given as Al-A2=al-a2. At the same 
time, it is checked whether this difference matches the 
difference. al-a2. between the position al of the decrypted 
mark 1 and the position information a2 of the mark 2. 
thereby judging whether the disk is a legitimate disk or not. 
The effect of this method is that the positions can be checked 
after compensating for variations of the reference delay time 
TD by using a simpler constitution. 

(D)*Next. the encrypted information writing process will 
be described. The position Mormation read in the process 
(C) is encrypted (digital signature), as will be described in 
detail in the next section (2), and is written on the optical 
disk using a barcode or other method. FIG. 3 shows how this 
is done. In FIG, 3(1), the reflective layer is trimmed by a 
pulsed laser, and a barcode-like trimming pattern, such as 
shown in FIG. 3(2), is formed. At a reproduction apparatus 
(player), an envelope waveform some 'portions of which are 
missing as shown in FIG. 3(3) a is obtained. The missing 
portions generate a low level signal which is different from 
a signal generated from an ordinary pit. and this signal is 
sliced by a second slice level comparator to obtain a low 
reflectivity portion detection signal as shown in FIG. 3(4). 
From this low reflectivity portion detection signal, a PWM 
demodulator 621 in FIG. 3(5) demodulates the signal con- 
taining encrypted information. 

The processing steps in the optical disk manufacturing 
process have been described above. Next, the constitution 
and operation of a reproduction apparatus (player) for repro- 
ducing the thus completed optical disk on a player will be 
described with reference to FIG. 41. 

In the figure, the construction of an optical disk 9102 will 
be described first A marking 9103 is formed on a reflective 
layer (not shown) deposited on the optical disk 9102. In the 
manufacturing process of the optical disk, the position of the 
marking 9103 was detected by position detecting means, and 
the detected position was encrypted as marking position 
information and written on the optical disk in the form of a 
barcode 9104. 

Position information reading means 9101 reads the bar- 
code 9104. and decrypting means 9105 contained therein 
decrypts the contents of the barcode for output Marking 
reading means 9106 reads the actual position of the marking 
9103 and outputs the result Comparing/judging means 9107 
compares the decrypted result from the decrypting means 
9105 contained in the position information reading means 
9101 with the result of reading by the marking reading 
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means 9106. and judges whether the two agree within a 
predetermined allowable range. If they agree, a reproduction 
signal 9108 for reproducing the optical disk is output; if they 
do not agree, a reproduction stop signal 9109 is output. 
Control means { not shown ; controls the reproduction opera- 
tion of the optical disk in accordance with these signals: 
when the reproduction stop signal is output, an indication to 
the effect that the optical disk is an illegal duplicated disk is 
displayed on a display (not shown) and the reproduction 
operation is stopped. In the above operation, it will be 
recognized that it is also possible for the marking reading 
means 9106 to use the decrypted result from the decrypting 
means 9105 when reading the actual position of the marking 
9103. 

Thus the reproduction apparatus of the above construction 
can detect an illegally duplicated optical disk and stop the 
reproduction operation of the disk, and can prevent illegal 
duplicates practically . 

The foregoing description has dealt with the process from 
optical disk manufacturing to the reproduction operation of 
the player, and we will now proceed to a description of 
appertaining matters relating to the details of the above 
process. 

(A) A low reflectivity portion address table, which is a 
position information list for the low reflectivity portion, will 
be explained, 

(a) Laser markings are formed at random in the anti- 
piracy mark formation process at the factory. No laser 
markings formed in this manner can be identical in physical 
feature. In the next process step, the low reflectivity portion 
584 formed on each disk is measured with a resolution of 
0.13 urn in the case of a DVD. to construct a low reflectivity 
portion address table 609 as shown in FIG. 13(a). Here, FIG. 
13(a) is a diagram showing a low reflectivity portion address 
table, etc. for a legitimate CD manufactured in accordance 
with the present embodiment, and FIG. 13(1?) is concerned 
with an illegally duplicated CD. The low reflectivity portion 
address table 609 is encrypted using a one-direction Miction 
such as the one shown in FIG. 18. and in the second 
reflective-layer forming step, a series of low reflectivity 
portions 584c to 5S4e, where the reflective layer is removed, 
is recorded in a barcode-like pattern on the innermost 
portion of the disk, as shown in FIG. 2. Alternatively, it may 
be recorded on a magnetic recording portion 67 of a 
CD-ROM. as shown in FIG. 14. FIG. 18 is a flowchart 
illustrating a disk check procedure by the one-way function 
used for the encryption, and FIG. 14 is a block diagram of 
a disk making apparatus and a special recording/ 
reproduction apparatus. As shown in FIG. 13, the legitimate 
CD and the illegally duplicated CD have the low reflectivity 
portion address tables 609 and 609x respectively, which are 
substantially different from each other. One factor resulting 
in this difference is that laser markings identical in physical 
feature cannot be made, as earlier noted. Another factor is 
that the sector address preassigned to the disk is different if 
the master disk is different. 

Referring now to FIG. 13, we will describe how the 
marking position information differs between the legitimate 
disk and pirated disk. The figure shows an example in which 
the above two factors are combined. In the example shown, 
two markings are formed on one disk. In the case of the 
legitimate CD. the first marking of mark number 1 is located 
at the 262nd clock position from the start point of the sector 
of logical address AL as shown in the address table 609. In 
the case of a DVD, one clock is equivalent to 0.13 urn. and 
the measurement is made with this accuracy. On the other 
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hand, in the case of the pirated CD, the first marking is 
located at the 81st clock position in the sector of address A2. 
as shown in the address table 6Q9x. By detecting this 
difference of the first marking position between the legiti- 
5 mate disk and pirated disk, the pirated disk can be distin- 
guished. Likewise, the position of the second marking is also 
different. To make the position information match that of the 
legitimate disk, the reflective film at the 262nd position in 
the sector of address Al must be formed with an accuracy of 

1Q one clock unit, i.e.. 0.13 um; otherwise, the pirated disk 
cannot be run. 

Accordingly, as shown in FIG. 14. in the reproduction 
apparatus, the encrypted table is decrypted to reconstruct the 
legitimate table which is then checked by a check program 

15 535 to differentiate between the legitimate disk and illegally 
duplicated disk, and to stop the reproduction operation in the 
case of a duplicated disk. In the example of FIG. 16, the 
legitimate disk and illegally duplicated disk have low reflec- 
tivity portion address tables 609 and 609x respectively, 

20 where values are different as shown in FIG. 17. In the case 
of the legitimate disk, in the track following the mark 1 the 
start and end positions are m+14 and m+267, respectively, as 
shown in FIG. 16(3), whereas in the case of the illegally 
duplicated disk these are m-h24 and m+277. respectively, as 

25 shown in FIG. 16(9) . Therefore, the corresponding values in 
the low reflectivity portion address tables 609 and 609jc are 
different, as shown in FIG. 17, thus making it possible to 
distinguish the duplicated disk. If an illegal manufacturer 
* desires to make a copy of the disk having the low reflectivity 

30 portion address table 609, they will have to perform a 
precise laser trunming operation with the resolution of the 
reproduced clock signal as shown in FIG. 16(8). In the case 
of a DVD disk, the period T of the reproduced clock pulse, 
when converted to a distance on the disk, is 0.13 una as 

35 shown in FIG. 27(5). Accordingly, to make an illegal copy, 
the reflective film will have to be removed with a submicron 
resolution of 0.1 um. It is true that when an optical head 
designed for an optical disk is used, a recording can be made 
on a recording film such as a CD-R with a submicron 

43 resolution. But in this case, the reproduced waveform will be 
as shown in FIG. 9(c), and the distinct waveform 824 as 
shown in FIG. 9(a) cannot be obtained unless the reflective 
film is removed. 

(b) A first method of achieving mass production of pirated 
45 disks by removing the reflective film may be by laser 

trimming using a high output laser such as a YAG laser. At 
the present state of technology, even the most highly accu- 
rate machining laser txiinining can only achieve a processing 
accuracy of a few microns. In the laser dimming for 
50 semiconductor mask corrections, it is said that 1 um is the 
limit of the processing accuracy. This means that it is 
difficult to achieve a processing accuracy of 0.1 um at the 
mass production level. 

(c) As a second method. X-ray exposure equipment for 
55 processing semiconductor masks for VLSIs and ion beam 

processing equipment are known at the present time as 
equipment that can achieve a processing accuracy of the 
order of submicrons. but such equipment is very expensive 
and furthermore, it takes much time to process one piece of 

60 disk, and if each disk were processed using such equipment, 
the cost per disk would be very high. At the present time, 
therefore, the cost would become higher than the retail price 
of most legitimate disks, so that making pirated disks would 
not pay and meaningless. 

65 (d) As described above . with the first method that involves 
laser trinirning, it is difficult to process with a submicron 
accuracy, and therefore, it is difficult to mass produce pirated 
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disks. On the other hand, with the second method using the 
submicron processing technology such as X-ray exposure, 
the cost per disk is so high that making pirated disks is 
meaningless from an economic point of view. Accordingly, 
making illegal copies can be prevented until some day in the 
future when low-cost submicrorj processing technology for 
mass production becomes practical. Since practical imple- 
mentation of such technology will be many years into the 
future, production of pirated disks can be prevented. In the 
case of a two-layer disk with a iow reflectivity portion 
formed on each layer as shown in FIG. 33, an illegally 
duplicated disk cannot be manufactured unless the pits on 
top and bottom are aligned with good accuracy when 
laroinating. and this enhances the effectiveness in preventing 
piracy. 

(B) Next, we will describe how the arrangement angle of 
the low reflectivity portion on the disk can be specified. 

In the present invention, sufficient effectiveness in piracy 
prevention is provided by the reflective layer level 
mechanism, that is, by the low reflective marking alone. In 
this case, the prevention is effective even if the master disk 
is a duplicate. However, the effectiveness can be enhanced 
by combining it with the piracy prevention technique at the 
master disk level. If the arrangement angle of the low 
reflectivity portion on the disk is specified as shown in Table 
532a and Table 609 in FIG. 13(a), an illegal manufacturer 
would have to accurately duplicate even the arrangement 
angle of each pit on the master disk. This would increase the 
cost of pirated disks and hence enhance the capability to 
deter piracy. 

(C) The points of the present invention will be summa- 
rized below. In the present invention, a legitimate manufac- 
turer can make a legitimate disk by processing-the disk using 
a general-purpose laser trimming apparatus having a pro- 
cessing accuracy of several tens of microns. Though a 
measuring accuracy of 0.13 urn is required, this can be 
achieved by conventional circuitry contained in a consumer 
DVD player. By encrypting the measured result with a secret 
encryption key, a legitimate disk can be manufactured. That 
is. the legitimate manufacturer need only have a secret key 
and a measuring apparatus with a measuring accuracy of 
0.13 uitl while the required processing accuracy is two or 
three orders of magnitude lower, that is. several tens of 
microns. This means that a convectional laser processing 
apparatus can be used. On the other hand, an illegal 
manufacturer, who does not have a secret key. will have to 
directly copy the encrypted information recorded on the 
legitimate disk. This means that a physical mark correspond- 
ing to the encrypted position information, that is. the posi- 
tion information on the legitimate disk, must be formed with 
a processing accuracy of 0.13 um. That is, the low reflective 
mark has to be formed using a processing apparatus having 
a processing accuracy two orders of magnitude higher than 
that of the processing apparatus used by the legitimate 
manufacturer. Volume production with an accuracy higher 
by two orders of magnitude, i.e., with an accuracy of 0. 1 um. 
is difficult both technically and economically, even in the 
foreseeable future. This means that production of pirated 
disks can be prevented during the life of the DVD standard. 
One point of the invention is to exploit the fact that the 
measuring accuracy is generally a few orders of magnitude 
higher than the processing accuracy. 

In the case of CLV, the above method exploits the fact that 
the address coordinate arrangement differs from one master 
disk to another, as previously noted. FIG. 19 shows the result i 
of the measurement of address locations on actual CDs. 
Generally, there are two types of master disk, one recorded 
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by rotating a motor at a constant rotational speed, i.e.. with 
a constant angular velocity ( CAV). and the other recorded by 
rotating a disk with a constant linear velocity (CLV). In the 
case of a CAV disk, since a logical address is located on a 
predetermined angular position on the disk, the logical 
address and its physical angular position on the disk are 
exactly the same no matter how many master disks are 
made. On the other hand in the case of a CLV disk, since 
only the linear velocity is controlled, the angular position of 
the logical address on the master disk is random. As can be 
seen from the result of the measurement of logical address 
locations on actual CDs in FIG. 19. the tracking pitch, start 
point, and linear velocity vary slightly from disk to disk even 
if exactly the same data is recorded using the same mastering 
apparatus, and these errors accumulate, resulting in different 
physical locations. In FIG. 19. the locations of each logical 
address on a first master disk are indicated by white circles, 
and the locations on second and third master disks are 
indicated by black circles and triangles, respectively. As can 
be seen, the physical locations of the logical addresses vary 
each time the master disk is made. FIG. 17 shows the low 
reflectivity portion address tables for a legitimate disk and 
an illegally duplicated disk for comparison. 

The method of piracy prevention at the master disk level 
has been described above. This is. when master disks of CLV 
recording, such as a CD or DVD. are made from the same 
logic data by using a mastering apparatus, as shown in FIG. 
19, the physical location of each pit on the disk varies 
between master disks, that is. between the legitimate disk 
and pirated disk. This method distinguishes a pirated disk 
from a legitimate disk by taking advantage of this charac- 
teristic. The piracy prevention technology at the master disk 
level can prevent pirated disks at the logic level made by 
simply copying data only from the legitimate disk. However, 
recent years have seen the emergence of pirate manufactur- 
ers equipped with more advanced technologies, who can 
make a master disk replica identical in physical feature to a 
legitimate disk by melting the polycarbonate substrate of the 
legitimate disk In this case, the piracy prevention method at 
the master disk level is defeated. To prevent this new threat 
of pirated disk production, the present invention has devised 
the piracy prevention method at the reflective layer level 
wherein a marking is formed on a reflective film. 

According to the method of the present invention, the 
marking is formed on each disk pressed from a master disk, 
even if disks are pressed from the master disk, by removing 
a portion of the reflective film in the reflective fUm formation 
process. As a result, the position and shape of the resulting 
low reflective marking is different from one disk to another. 
In a usual process, it is next to impossible to partially remove 
the reflective film with an accuracy of submicrons. This 
serves to enhance the effectiveness in preventing duplication 
since duplicating the disk of the invention does not justify 
the cost. 

FIG. 20 shows a flowchart for detecting a duplicated CD 
by using the low reflectivity portion address table. The delay 
time needed to detect the optical mark varies only slightly 
due to the optical head and circuit designs of the reproduc- 
tion apparatus used. This of the delay time TD circuit can be 
predicted at the design stage or at the time of mass produc- 
tion. The optical mark position Mormation is>obtained by 
measuring the number of clocks, that is, the time, from the 
frame synchronizing signal. Due to the effect of the circuit 
delay time, an error may be caused to detected data of the 
optical mark position information. As a result, a legitimate 
disk may be erroneously judged as being a pirated disk, 
inconveniencing a legitimate user. A measure to reduce the 
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effect of the circuit delay time TD wiii be described below. 
Further, a scratch made on a disk after purchase may cause 
an interruption in the reproduced clock signal, causing an 
error of a few clocks in the measurement of the optical mark 
position information. To address this problem, a tolerance 
866 and a pass count 867. shown in FIG. 27, are recorded on 
a disk, and while allowing a certain degree of tolerance on 
the measured value according to the actual situation at the 
time of reproduction, the reproduction operation is permitted 
when the pass count 867 is reached; the margin allowed for 
an error due to a surface scratch on the disk can be controlled 
by the copyright owner prior to the shipment of the disk. 
This will be described with reference to FIG. 20. 

In FIG. 20. the disk is reproduced in step 865a to recover 
the encrypted position information from the barcode record- 
ing portion or pit recording portion of the present invention. 
In step 865b, decryption or signature verification is 
performed, and in step 865c. a list of optical mark position 
information is recovered. Next, if the delay time TD of a 
reproduction circuit is stored in the circuit delay time storing 
section 608^ in the reproduction apparatus of FIG. 15, TD 
is read out in step 865A and the process proceeds to step 
865*. If TD is not stored in the reproduction apparatus, or if 
a measurement instruction is recorded on the disk, the 
process proceeds to step 865^ to enter a reference delay time 
measurement routine. When address Ns-1 is detected, the 
start position of the next address Ns is found. The frame 
synchronizing signal and the reproduced clock are counted, 
and in step 865/. the reference optical mark is detected. In 
step 865g, the circuit delay thncTD is measured and stored. 
This operation is the same as the operation to be described 
later with reference to FIG. 16(7). In step 865*, the optical 
mark located inside address Nm is measured. In steps 865/. 
865/. 865/;. and 865m. the optical mark position information 
is detected with a resolution of one clock unit as in steps 
865£ 865v, 865/, and 865y. Next, in step 865n, a pirated 
disk detection routine is entered. First, the circuit delay time 
TD is corrected. In step 865/?, the tolerance 866, i,e„ tA. and 
pass count 867 recorded on the disk, as shown in FIG. 27, 
are read to check whether or not the position information 
measured in step 865g falls within the tolerance tA. If the 
result is OK in step 865r, then in step 865s it is checked 
whether the checked mark count has reached the pass count. 
If the result is OK. then in step 865w the disk is judged as 
being a legitimate disk and reproduction is permitted. If the 
pass count is not reached yet. the process returns to step 
865s. If the result is NO in step 865r, then it is checked ki 
step 865/ whether the error detection count is smaller than' 
NA, and only when the result is OfC the process returns tc 
step 8655. If it is not OK* then in step 865v the disk is judged 
as being an illegal disk and the operation is stopped. 

As described, since the circuit delay time TD of the 
reproduction apparatus is stored in the IC ROM. optical 
mark position information can be obtained with increased 
accuracy. Furthermore, by setting the tolerance 866 and pass 
count for the software on each disk, the criteria for pirated 
disk detection can be changed according to the actual 
condition to allow for a scratch made on the disk after 
purchase. This has the effect of reducing the probability of 
a legitimate disk being erroneously judged as an illegal disk. 

(D) A further description will be given of the operation of 
reading the nonreflective optical marking portion of the 
two-disk laminated optical disk, focusing on points that 
were not touched on in the foregoing description of the 
operating principle. 

That is, as shown in FIG. 16, the start position address 
number, frame number, and clock number can be measured 
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accurately with a resolution of 1 T unit, that is. with a 
resolution of 0.13 um in the case of the DVD standard, by 
using a conventional player, thereby to accurately measure 
the optical mark of the present invention. FIGS. 27 and 28 
5 show the optical mark address reading method of FIG. 16 as 
applied to the DVD standard. Explanation of signals (1). (2). 

(3) . (4). and (5) in FIGS. 27 and 28 will not be given here 
since the operating principle is the same as that shown in 
FIG. 16. 

10 The correspondence between FIG. 16, which illustrates 
the principle of the detection operation for detecting the 
position of a low reflectivity portion on a CD. and FIGS. 27 
and 28, which are concerned with a DVD. is given below. 
FIG. 16(5) corresponds to FIGS. 27(1) and 28(1). The 

15 reproduced clock signal in FIG. 16(6) corresponds to that 
shown in FIGS. 27(5) and 28(5). Address 603 in FIG. 16(7) 
corresponds to that shown in FIGS. 27(2) and 28(2). 

Frame synch 604 in FIG. 16(7) corresponds to that shown 
in FIGS. 27(4) and 28(4). Starting clock number 605a in 

20 FIG. 16(8) corresponds to reproduced channel clock number 
in FIG. 27(6). Instead of the end clock number 606 in FIG. 
16(7), in FIGS. 27(7) and 28(7) data is compressed using a 
6-bit marking length. 
As illustrated, the detection operation is fundamentally 

25 the same between CD and DVD. A first difference is that a 
1-bit mark layer identifier 603a as shown in FIG. 27(7) is 
included for identifying whether the low reflectivity portion 
is of the one-layer type or two-layer type. The two-layer 

30 DVD . structure provides a greater anti-piracy effect as 
previously described. A second difference is that since the 
line recording density is nearly two times as high. 1 T of the 
reproduced clock is as short as 0.13 urru which increases the 
resolution for the detection of the position information and 

35 thus provides a greater anti-piracy effect. 

Shown in FIG. 27 is the signal from the first layer in a 
two-layer optical disk having two reflective layers. The 
signal (1) shows the condition when the start position of an 
optical mark on the first layer is detected. FIG. 28 shows the 

4Q condition of the signal from the second layer. 

To read the second layer, a first/second layer switching 
section 827 in FIG. 15 sends a switching signal to a focus 
control section 828 which then controls a focus driving 
section 829 to switch the focus from the first layer to the 

45 second layer. From FIG. 27, it is found that the mark is in 
address (n). and by counting the frame synchronizing signal 

(4) using a counter, it is found that the mark is in frame 4. 
i From signal (5). the FLL reproduced clock number is found. 
> and the optical marking position data as shown by the signal 
I 50 (6) is obtained. Using this position data, the optical mark can 

be measured with a resolution of 0.13 um on a conventional 
consumer DVD player. 

(E) Additional matters relating to the two-disk laminated 
optical disk will be further described below. 

55 FIG. 28 shows address position information pertaining to 
the optical markin g formed on the second layer. Since laser 
light penetrates the first and second layers through the same 
hole, as shown in the process step (b)(sic) in FIG. 7, the 
nonreflective portion 815 formed on the first reflective layer 

60 802 and the nonreflective portion 826 formed on the second 
reflective layer 825 are identical in shape. This is depicted in 
the perspective view of FIG. 33. In the present invention, 
after the transparent substrate 801 and the second substrate 
803 are laminated together, laser light is applied penetrating 

65 through to the second layer to form an identical mark 
thereon. In this case, since coordinate arrangements of pits 
are different between the first and second layers, and since 
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the positional relationship between the first and second 
layers is random when laminating them together, the pit 
positions where the mark is formed are different between the 
first and second layers, and entirely different position infor- 
mation is obtained from each layer. These two kinds of 
position information are encrypted to produce an anti -piracy 
disk. If it is attempted to duplicate this disk illegally, the 
optical marks on the two layers would have to be aligned 
with a resolution of about 0.13 um. As previously described, 
at the present state of technology it is not possible to 
duplicate the disk by aligning the optical marks with the pits 
with an accuracy of 0.13 um. that is. with an accuracy of the 
order of 0.1 um. but there is a possibility that mass produc- 
tion technology may be commercially implemented in the 
future that enables large quantities of single-layer disks to be 
trimmed with a processing accuracy of 0. 1 urn. at low cost 
Even in that case, since the top and bottom disks are trimmed 
simultaneously in the case of the two-layer laminated disk 
800, the two disks must be laminated together with the pit 
locations and optical marks aligned with an accuracy of a 
few microns. However, it is next to impossible to laminate 
the disks with this accuracy because of the temperature 
coefficient, etc. of the polycarbonate substrate. When optical 
marks were formed by applying laser light penetrating 
through the two-layer disk 800. the resulting anti-piracy 
mark is extremely difficult to duplicate. This provides a 
greater anti-piracy effect The optical disk with an anti-piracy 
mechanism is thus completed. For piracy prevention 
applications, in cases where the disk process and laser cut 
process are inseparable as in the case of the single-plate 
type, the encryption process* which is an integral part of the 
laser cut process, and processing involving a secret encryp- 
tion key have to be performed at the disk noanufactiaing 
factory. This means that in the case of the single-plate type 
the secret encryption key maintained in the software com- 
pany have to be delivered to the disk manufacturing factory. 
This greatly reduces the security of encryption. On the other 
hand, according to the method involving laser processing of 
laminated disks, which constitutes one aspect of the 
invention, the laser trimming process can be completely 
separated from the disk manirfacturing process. Therefore, 
laser trimming and encryption operations can be performed 
at a factory of the software maker. Since the secret encryp- 
tion key that the software maker keeps need not be delivered 
to the disk mantrfacturing factory, the secret key for encryp- 
tion can be kept in the safe custody of the software maker. 
This greatly increases the security of encryption. 

(2) (A) Encryption (digital signature) of marking position 
information, etc. and decryption and reproduction of optical 
disk position information, etc.. which have been briefly 
described in (1), will now be described in more detail. (B) 
Various mechanism for piracy prevention will also be 
described below. 

(A) Encryption (digital signature) and its reproduction 
will be described. 

(a) Simple encryption (digital signature) 
(Implementation by RSA function) 
First, an example of encryption in which encryption is 
performed using a function of a message recovery type 
signature method, such as an RSA function, will be 
described with reference to the flowcharts shown in FIGS, 
22 and 24. 

As shown in FIG. 22. the process consists of the following 
major routines: step 735a where marking position informa- 
tion is measured at the optical disk maker, step 695 where 
the position information is encrypted (or a digital signature 
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is appended), step 698 where the position information is 
decrypted for the signature is verified or authenticated) in 
the reproduction apparatus, and step 735 w where a check is 
made to determine whether the disk is a legitimate optical 
disk or not. 

First, in step 735a. the marking position information on 
the optical disk is measured in step 735b. The position 
information is then compressed in step 735d, and the com- 
pressed position information H is obtained in step 735^. 

In step 695, the ciphertext of the compressed position 
information H is constructed. First, in step 695. a secret key, 
d. of 512 or 1024 bits, and secret keys, p and q. of 256 or 5 12 
bits, are set. and in step 695b, encryption is performed using 
an RSA function. When the position information H is 
denoted by M. M is raised to d-th power and mod n is 
calculated to yield ciphertext C. In step 695<i, the ciphertext 
C is recorded on the optical disk. The optical disk is thus 
completed and is shipped (step 735k). 

In the reproduction apparatus, the optical disk is loaded in 
step 735m. and the ciphertext C is decrypted in step 698. 
More specifically, the ciphertext C is recovered in step 698e, 
and public keys, e and n. are set in step 698/; then in step b, 
to decrypt the ciphertext C the ciphertext C is raised to e-th 
power and the mod n of the result is calculated to obtain 
plaintext M. The plaintext M is the compressed position 
information H. An error check may be performed in step 
698#. If no errors, it is decided that no alterations have been 
made to the position information, and the process proceeds 
to the disk check routine 735 w shown in FIG- 24. If an error 
is detected, it is decided that the data is not legitimate one, 
and the operation is stopped. 

In the next step 736a, the compressed position Morma- 
tion H is expanded to recover the original position informa- 
tion. In step 736c, measurements are made to check whether 
the marking is actually located in the position on the optical 
disk indicated by the position information. :In step 736J. it 
is checked whether the difference between the decrypted 
position information and the actually measured position 
information falls within a tolerance. If the check is OK in 
step 736e+ the process proceeds to step 7366 to output 
software or data or execute programs stored on the optical 
disk. If the check result is outside the tolerance, that is, if the 
two pieces of position information do not agree, a display is 
produced to the effect that the optical disk is an illegally 
duplicated one, and the operation is stopped in step 736g. 
RSA has the effect of reducing required capacity since only 
the ciphertext need be recorded. 

(Implementation by elliptic function) 

Next, another type of signature system, that is. an imprint 
type signature system using an elliptic function for 
encryption, will be described with reference to the flow- 
charts shown in FIGS. 23 and 24. 

As shown in FIG. 23. etc.. the process consists of the 
following major routines: step 735c where marking position 
information is measured at the optical disk maker, step 735/ 
where authentication ciphertext (i.e., signature) for the posi- 
tion information is computed, step 735n where position 
information authentication (signature verification) is per- 
formed in the reproduction apparatus, and step 735w where 
a check is made to determine whether the disk is a legitimate 
optical disk or not. 

The process from step 735a to step 73Se is the same as 
that for the RSA function. 

In step 735/, authentication ciphertext for the compressed 
position information H is constructed. First, in step 735g, 
secret keys X (128 bits or over) and K are set, and in step 
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735ft. a public system parameter G. a point on an ellipse, is 
determined and with f(x) as a one-direction function. R=f 
(KxG) is obtained first, and then R'=f(R) is obtained; then 
from equation S=(KxR'-H)X" 1 mod Q, R and S as authen- 
tication ciphertext are generated. In step 735/. the authenti- 
cation ciphertext R and S and the plaintext H of the 
compressed position information are recorded on the optical 
disk, and in step 735k. the completed disk is shipped. 

In the reproduction apparatus, the optical disk is loaded in 
step 735m. and an authentication operation is performed in 
step 735n to authenticate the position information. 

First, in step 735p. the authentication ciphertext R and S 
and the compressed position information H are recovered 
from the loaded optical disk. In step 735r. public keys Y. G, 
and Q are set, and in step 735.?, an authentication operation 
is performed whereby f(AxY+BxG) is obtained from 
A=SR~ l mod Q and B^ffiC 1 mod Q. In step 735*. it is 
checked if the above value matches R. If they match, it is 
decided that no alterations have been made to the position 
information, and the process proceeds to the optical disk 
check routine 735>v in FIG. 24. If they do not match, it is 
decided that the data is not legitimate one. and the operation 
is stopped. 

The subsequent process from step 736a to step 736g is the 
same as that for the RSA function. That is, if the optical disk 
is judged as being an illegally duplicated one. a display to 
that effect is produced, and in step 736g, the operation is 
stopped. Compared to the RSA function, the elliptic function 
has the advantage that the computation time is short which 
. serves to reduce the time before the reproduction starts. This 
system therefore is suitable for application to consumer 
reproduction apparatus. 

(b) Complex encryption (digital signature) using master 
key. subkey, etc. 

Not only the marking position information but informa- 
tion concerning the features of contents of the software 
stored on the optical disk and an anti-piracy identifier are 
subjected to encryption (digital signature). Furthermore, two 
kinds of encryption keys, master key and subkey. are used. 
A specific example is described below in which a secret key 
encryption function is used in combination with a public key 
encryption function. 

Before proceeding to a detailed description of the specific 
example, a basic functional description of this system will be 
given first with reference to FIG. 40 to facilitate understand- 
ing of the basics thereof. 

In the example treated in the following basic description, 
encryption is performed using a public key encryption 
function, and encryption using a secret key encryption 
function is not treated here. Therefore, the master secret ke> 
for public key encryption and the sub secret key for public 
key encryption are simply referred to as the master secret 
key and sub secret key, respectively. Likewise, the master 
public key for public key encryption and the sub public key 
for public key encryption are simply referred to as the master 
public key and sub public key, respectively. 

As shown in FIG. 40, a key management center 9001 
securely manages the master secret key to maintain its 
secrecy, and is linked to a software maker 9002, to be 
described later, via a communication line 9003. When a 
request for encryption is made from the software makei 
9002, the key management center 9001 receives data, to be 
encrypted, via a network 9003 and encrypts the data using 
the master secret key. 

For simplicity of explanation, it is assumed here that the 
software maker 9002 also includes a disk manufacturing 
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factory. Therefore, the software maker 9002 here is a depart- 
ment that performs the manufacturing process at the disk 
manufacturing factory illustrated in FIG. L in addition to the 
production of software. That is. when manufacturing optical 

• disks of movie software, encryption for prevention of illegal 
duplications is also performed. To accomplish the 
encryption, the software maker 9002 obtains an exclusive 
sub secret key from the key management center 900L The 
above has described the arrangement at the optical disk 

) maker side. 

On the other hand, there is a player 9004 at the user side 
where the optical disk is used. The player 9004 is an 
apparatus for reproducing an optical disk, and contains a 
ROM in which is prestored a master public key correspond- 
; ing to the master secret key maintained at the key manage- 
ment center. A function to stop the reproduction of an 
illegally duplicated optical disk is also incorporated. 

Having described the general arrangement, we will now 
describe the operation. 

(b-1) First the processing steps for encryption performed 
at the software maker 9002 will be described. 

The encryption step first performed (the first encryption 
step) involves encryption at the stage of disk mold 
manufacturing, and the encrypted information is reflected in 
the shape of the disk mold. The encryption step performed 
finally (the second encryption step) concerns encryption 
performed at a stage after the formation of a marking by 
laser trimming. 

(1-1) In the first encryption step, encryption is performed 
using a sub public key corresponding to the sub secret key 
to be used in the second encryption step, and using a 
software feature information and anti-piracy identifier. The 
information is transferred to the key management center 
9001 via the communication line 9003. The software feature 
information refers to the information describing the contents 
of the movie software written on the optical disk, and it is 
unique to each movie software and is different from one 
software to another. The anti-piracy identifier is provided to 
make it possible to detect whether the manufactured optical 
disk is processed with piracy prevention. The identifier of an 
optical disk processed with piracy prevention using second 
ciphertext is "1"; otherwise, the identifier is "0". In this 
example, the identifier is "1", needless to say. 

(1-2) The key management center 9001 encrypts the 
information transferred from the software maker 9002, by 
using the master secret key rnaintained at the center, and 
sends the encrypted information back to the software maker 
9002. The thus created ciphertext is referred to as the first 
ciphertext 

(1-3) The software maker 9002 records the first ciphertext 
on the disk mold (or master) along with the movie software, 
etc. 

(1-4) The software maker 9002 molds disks by using the 
thus completed mold. 

(1-5) Next, the software maker 9002 fabricates optical 
disks from the molded disks, and performs the laser 
txirnming. as previously described, to form a marking on 
each optical disk. 

(1-6) Further, the software maker 9002 detects the posi- 
tion of the marking and encrypts the obtained position 
information by using the sub secret key maintained at the 
maker. The thus encrypted information is referred to as the 
second ciphertext Since it is created by encrypting the 
position information, the second ciphertext is different from 
one optical disk to another even if they are pressed from the 
same mold. This is the difference from the first ciphertext. 



23 

(1-7) Finally, the software maker 9002 records the second 
ciphertext as a barcode on the optical disk. The optical disk 
is thus completed. 

(b-2) Next, we will describe the operation when the user 
who purchased the thus completed optical disk plays it back 
on the player 9004. 

(2-1) First, the player 9004 reads the first ciphertext 
recorded on the optical disk, and using the master public key 
stored in the ROM. decrypts the first ciphertext which 
contains in encrypted form the sub public key corresponding 
to the sub secret key, the software feature information, and 
the anti-piracy identifier. 

(2-2) In the meantime, the player 9004 extracted the 
software feature information from the contents of the movie 
software recorded on the optical disk. The extracted soft- 
ware feature information is compared with the software 
feature information obtained by decryption in (2-1); if they 
do not agree, the optical disk is judged as being an illegally 
duplicated one. and the subsequent reproduction operation is 
stopped. If they agree, the process proceeds to the next step. 

(2-3) It is checked whether the anti-piracy identifier 
obtained by decryption in (2-1) is "1" or "0". If it is "0", the 
reproduction operation is immediately started, skipping the 
process hereinafter described. If it is the process further 
continues. 

In this manner, if the optical disk happens to be a disk not 
processed with the piracy prevention using the second 
ciphertext, the disk can be reproduced on the player 9004 as 
long as its identifier is set to "0" in a legitimate way. If a 
pirate attempts to make an illegal copy by altering the 
identifier to "0". his effort will be thwarted because the 
identifier is encrypted using the master secret key after being 
combined with the software feature information, etc.. as 
earlier described. 

(2-4) First the second ciphertext recorded on the optical 
disk is read out Then, the second ciphertext which is the 
encrypted version of the position information, is decrypted 
using the sub public key obtained by decryption in (2-1). 

(2-5) Using the decrypted position information, it is 
checked whether the marking is actually formed in the 
position on the optical disk indicated by the position infor- 
mation. Then, the actually measured marking position infor- 
mation is compared with the position information decrypted 
in If they do not agree, the optical disk is judged as 
being an illegally duplicated one, and the reproduction 
operation is stopped. If they agree, the optical disk is judged 
as being a legitimate one. and the reproduction operation is 
started. 

An outline of the system has been described above. Now, 
a description will be given in more specific form. 

As shown in FIG. 32. software feature extracting means 
864 extracts the software parameters unique to the software, 
such as the TOC information showing the rime organization 
of each chapter of the video software, image compression 
parameters, the title name. etc. from the contents of the 
software, and compresses the extracted information to 128 
bits to 256 bits by the computation of a checksum, the 
computation of a Galois field, etc.. and a one-direction hash 
function 864a such as SHA and MD5, to create software 
feature information 863. The software feature information 
863 is then combined with a sub public key 861 special to 
the software maker and an anti-piracy identifier 865 as a 
copyright identifier, into one data block which is then 
encrypted in steps S66a and S66b using a master secret key 
for public key encryption and is recorded on a master disk 
867 in step S66e, along with the software proper. 
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When a system is employed that uses secret key encryp- 
tion in combination with public key encryption, a master 
secret key for secret key encryption is used in step 866c. 
encryption is performed in step 866^. and the data is 
recorded on the master disk 867 in step 866e. 

The disk mastering process is thus completed. The anti- 
piracy identifier 865 recorded on the master disk defines 
how the copyright of the software should be protected, and 
consists of at least four bits of copyright protection flags, 
including a flag of one bit to indicate whether the software 
is equipped with an anti-piracy mechanism, a flag of one bit 
to indicate whether it contains a low reflectivity barcode 
portion, a flag of one bit as a scramble identifier 965a to 
indicate whether the software is scrambled or not. and a flag 
of one bit to indicate whether software dubbing is prevented 
or not. Since the anti-piracy identifier 865 and the sub public 
key 861 are combined with the software feature information 
863 unique to the software and are encrypted together by 
using the master secret key for public key encryption, it is 
not possible to alter them. 

The anti-piracy identifier 865 and the sub public key 861 
are combined with the software feature information unique 
to the software, into one data block which is then encrypted 
by the secret key. 

If the software feature information 863 consists of 256 
bits, there are 2256 possible variations. This means that 
when software feature information is extracted from data 
obtained by authoring a particular movie software product 
the probability that it coincides with software feature infor- 
mation of some other software is 1 /ks6; therefore, the prob- 
ability of such coincidence occurring is almost zero. When 
a one-direction hash function, such as MD5 or SHA, is used, 
if the hash value, i.e., the software feature information 963. 
consists of 256 bits, finding two software contents having 
the same hash value will require 1018 years of computing 
time using a currently available large computer. 
Consequentiy, it is nearly impossible to replace software. 
For the software feature information of a particular software 
product authored, only one value exists, and no other 
software can have the same value. 

Since the software feature information is encrypted jointly 
with the anti-piracy identifier 865 and the sub public key 
861. neither of these two values cannot be altered. Thus, 
after authoring, the anti-piracy identifier 865 and the sub 
public key 861 for a particular software product are uniquely 
identified. 

The recording of the anti-piracy identifier 865 on the 
master disk will be described in further detail. 

How the anti-piracy identifier 865 is actually appended to 
software is at the discretion of the copyright owner of the 
software. It takes cost and labor to apply an anti-piracy 
measure to optical disk software. Accordingly, not all optical 
disks are equipped with an anti-piracy mechanism; some 
optical disks incorporate an anti-piracy mechanism or the 
barcode of the present invention, while others do not. If 
legitimate disks having no anti-piracy mechanism or bar- 
code are allowed to exist, reproduction apparatus are 
required to have a function that enables both types of disk to 
be reproduced properly. In that case, when reproducing a 
disk having no piracy protection, two possibilities must be 
considered: one is that the disk is a legitimate disk for which 
the software company has unlocked the piracy protection in 
a legitimate way, and the other is that the disk is a disk which 
the software company has produced with piracy protection 
but whose anti-piracy identifier has been illegally altered by 
a pirate- 
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Means for identifying whether the anti-piracy identifier is 
legitimate or not is therefore important. 

In the present invention, the anti-piracy identifier 865. 
including the anti-piracy identifier, is encrypted together 
with the software feature information by using a secret key. 
and recorded in a ciphertext recording section on the master 
disk. The reproduction apparatus decrypts the ciphertext 
with a prescribed public key. This prevents illegal alterations 
from being made to either data. 

The only way left to pirates is to replace the whole portion 
of the first ciphertext. which contains the software feature 
information 863 and the anti-piracy identifier 865. by dif- 
ferent one. 

To distinguish the software feature information 863 from 
the software feature information extracted from the movie 
software actually written on the optical disk, which will be 
described later, the former may sometimes be referred to as 
the first software feature information, and the latter as the 
second software feature information. Both kinds of infor- 
mation are the same in that they relate to the contents of the 
same movie software, but different in that the former is 
written in encrypted form at the time the optical disk is 
manufactured, while the latter is extracted by examining the 
contents of the actually recorded movie software at the time 
of reproduction. 

Since the first software information 863 has a value 
unique to the software for which the authoring is completed, 
the probability of some other software yielding the same 
value is Vbss. which is approximately zero, as earlier noted. 
If the first software information 863 is replaced, the infor- 
mation no longer agrees with the second software feature 
information 885 actually extracted from the disk in step 
876* in the process of the check routine of FIG. 38 per- 
formed in steps 876^, 876c, 876e. and 876/ This prevents 
the disk with altered information from being played back. In 
this way, the anti-piracy identifier 865 of the software and 
the sub public key hereinafter described are protected 
against illegal alterations. An illegal manufacturer, who is 
thinking of making illegal disks by copying the software 
from a legitimate disk, may therefore consider making disks 
that do not have either the anti-piracy identifier or the 
barcode. In that case, the anti-piracy identifier in the anti- 
piracy identifier 865 would have to be changed from ON 
( w r) to OFF ("0") setting. To change the setting, however, 
it is necessary to have the key management center issue the 
first ciphertext encrypted with the master secret key shown 
at step 866tf in FIG. 36. but normally, measures are in effect 
to prevent the key management center from issuing it to an 
unauthorized person, thus preventing illegal alteration of the 
anti-piracy identifier 865. 

That is, the first software feature information 863 and the 
anti-piracy identifier 865 are encrypted together into the first 
ciphertext 886 for recording on the master disk. This has the 
effect of thwarting any attempt by a pirate to make illegal 
copies of piracy-protected software in the disk format of no 
piracy prevention without an anti-piracy mark or mecha- 
nism. With this method that constitutes one aspect of the 
invention, if a disk standard is worked out. allowing the 
existence of disks without piracy protection along with disks 
with piracy protection, and if the standard is replaced by a 
new-generation standard, reproduction apparatus of the new 
generation can achieve piracy prevention against all disks. 
This is a big practical advantage. 

The necessity of the master secret key and sub secret key 
in secret key of a public key encryption and the construction 
and functions of these secret keys will be described in detail 
below. 
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In the piracy prevention method of the invention, the 
secret encryption key need not be delivered to the disk 
manufacturing factory since secondary recording can be 
done. However, it is not realistic to have an encryption 
center create ciphertext for each of the disks manufactured 
throughout the world and to receive the ciphertext via a 
network, because this would cause an enormous increase in 
communication traffic. On the other hand, distributing the 
secret key to each software maker and disk manufacturing 
factory is not possible from the viewpoint of security. A 
method that can overcome this problem is therefore needed 

As a method to overcome this problem, the present 
invention provides the master key/subkey system. Accord- 
ing to the present invention, the key management center (key 
issuing center) keeps the master secret key which is not 
disclosed to the outside. On the other hand, the software 
company keeps the sub secret key with which the company 
maintains the security of its software on its own responsi- 
bility. As already described with reference to FIG. 32, the 
software feature information and the sub public key the 
software company keeps are jointly encrypted, using the 
master secret key, into the first ciphertext. The reproduction 
apparatus decrypts the first ciphertext by applying the master 
public key. and extract the sub public key from the decrypted 
text. This prevents illegal alterations from being made to the 
sub public key that becomes necessary to decrypt the second 
ciphertext, i.e.. the encrypted version of the marking posi- 
tion information. 

This means that a particular software product can only be 
encrypted using a particular secret key, that is. the software 
maker's secret key corresponding to the sub public key. 
Using the sub secret key, the software maker can set the key 
on software locked or unlocked at their option. 

This in turn means that pirates cannot produce pirated 
disks unless they steal the sub secret key information unique 
to the software from the software maker. 

In FIG. 32, the software maker combines disk physical 
position information 868 and disk ID 869, and encrypts them 
together by using the sub secret key 876 in step 866/ to 
construct a public key cipher 859 which is recorded on the 
optical disk 800 in the form of a barcode. This permits the 
software maker to produce piracy-protected disks without 
having to have the master secret key 866a. The effect of this 
is to protect the security of the master secret key. If the sub 
secret key is stolen and pirated disks are produced, the 
damage is limited to the software for which that sub secret 
key was issued. When the software maker issues a new sub 
secret key and sub public key, production of pirated disks of 
the software thereafter can be prevented. FIGS. 36 and 37 
are general system diagrams showing data flow. 

In operation. FIG. 36 is the same as FIG. 32, and detailed 
explanation will not be given here. In FIG. 36. the software 
company 871a first sets its own sub secret key 876, and 
computes the sub public key 861. The sub public key 861 is 
combined with the software feature information 861 of the 
software to be recorded, and transmitted to the key issuing 
center 872 via a network such as the Internet, The key 
issuing center 872 encrypts the combined signal with the 
master secret key 866a and sends back the encrypted master 
public key 858 to the software company. The software 
company combines it with the software, and sends the 
combined signal to the disk manufacturing factory 873 
where it is recorded on the master disk 867 from which the 
disk 800 is produced. Referring next to FIG. 37, the software 
company 871& forms a marking on the disk 800. reads the 
marking position information, encrypts the position infor- 
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mation with the sub secret key 876 corresponding to the sub 
public key, and, using a pulsed laser 813, records the 
encrypted information on the disk 800& in the form of a 
barcode, A detailed description of the recording operation 
has already be given and will not be repeated here. 

Next, the anti-piracy operation in the reproduction 
apparatus, when reproducing the thus completed optical 
disk, will be described in further detail with reference to 
FIG. 38, 

The operation consists essentially of a software check step 
874 and a disk check step 875, In the software check step 
874, first the first ciphertext is reproduce from the disk 800 
in step 876#, and then, using the master public key stored in 
the ROM in the reproduction apparatus in step 876c. the first 
ciphertext is decrypted into plaintext in step S76b. In step 
S76d. the plaintext of the first software feature information 
863 and sub public key 861 is obtained and in step 876/, it 
is checked against the second software feature information 
extracted using the one-direction hash function. If the check 
is KG in step S76g. the operation is stopped; if the check is 
OK. the sub public key is output in step S76h, If alterations 
have been made to the sub public key or software attributes 
by a pirate, the two kinds of information do not agree, so that 
the reproduction of an illegal disk is prevented. The legiti- 
mate sub public key is thus obtained at the reproduction 
apparatus. 

In the disk check step 875. the sub public key is input in 
step 876£, and the second ciphertext. i.e., the public key 
cipher 859 (see FIG. 32), is reproduce in step 876m. In step 
876n. the second ciphertext is decrypted into plaintext by 
using the sub public key, and in step 876p. the marking 
position information is obtained. In this case, the marking 
position information cannot be altered illegally unless the 
sub secret key 876 (see FIG. 32) corresponding to the sub 
public key is leaked out In step $76p. the actual position of 
the marking formed on the disk by laser is read, and in step 
876/*. this position is checked. If the result is NO in step 
876.?. the operation is stopped in step 876f, producing a 
display "Pirated Disk". If the result is YES, the reproduction 
operation is allowed to continue in step 876«. 

With the above construction, illegally duplicated disks 
cannot be reproduced on the reproduction apparatus unltss 
the sub secret key maintained at the software maker is stoka 
or unless the nonreflective marking portion is laser-trimmed 
with an accuracy of submicrons, for example, 0.13 urn, and 
two disks are laminated together with an accuracy of the 
order of a few microns. This makes it virtually impossible to 
make pirated disks. This has the effect of preventing pirating 
of disks. 

(c) Detailed description of an example using a public key 
encryption function in combination with a secret key 
encryption function 

A first feature of the encryption system of the present 
invention is the use of two encryption functions, a public key 
encryption function and a secret key encryption function, 
when encrypting marking position information, etc. on each 
optical disk. 

The following description deals with problems encoun- 
tered when actually implementing a piracy prevention 
method that uses public key cipher, and also deals with a 
method of implementation. The public key cipher here refers 
to the position information encrypted using a public key 
encryption function (for example, an RSA function). 

From the security point of view, it is desirable that all 
reproduction apparatus be equipped with a public key cipher 
decoder to decode the anti-piracy public key cipher of the 
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present invention. However, processing a 512-bit public key 
cipher requires 0.3 seconds using a 32-bit. 50-MHz CPU. On 
the other hand, the DVD player control IC predominant in 
consumer apparatus today is an 8-bit one-chip microcom- 
puter. With this CPU. it will take more than a few minutes 
to process the public key. This means that the user has to 
wait a few minutes before an image is reproduced from a 
DVD. This poses a problem in employing the public key 
cipher system in consumer products. 

Since, at the present level, public key cipher cannot be 
processed by the CPU used in consumer products, for the 
present there is no option but to use a secret key cipher 
decoder for consumer reproduction apparatus because it 
requires a small amount of processing time. However, in the 
case of secret key cipher, since the secret encryption key can 
be easily deciphered from cipher decoder information, the 
secret key cipher will lose its anti-piracy effect once deci- 
phered. Therefore, transferring to public key cipher which is 
difficult to decipher is imperative in the future. 

Secret key cipher and public key cipher are mutually 
incompatible. If the system were simply switched from 
secret key cipher to public key cipher in future, second- 
generation optical disks having public key cipher would not 
be able to be decoded and reproduced on a first-generation 
player having a secret key cipher decoder. Furthermore, 
first-generation optical disks having secret key cipher would 
be unable to be reproduced on a future player. If the player 
is constructed to allow the reproduction of such disks, it will 
allow pirates to decipher the secret key for the secret key 
cipher and create the secret key cipher using the deciphered 
key, thus giving rise to the possibility of pirated disks being 
marketed in large quantities. If disks encrypted with secret 
key are allowed to be reproduced on future players, piracy 
cannot be prevented even if public key cipher is used. 

The need therefore arises for a mechanism which, if the 
cipher decoder of reproduction apparatus is changed from 
the secret key to the public key system in the future, can 
preserve compatibility to allow earlier optical disks to be 
reproduced properly on reproduction apparatus having a 
new public key cipher decoder while preventing the repro- 
ducing of pirated disks. 

A method of the invention that satisfies the need for 
compatibility is disclosed hereinafter. As shown in FIG. 39. 
the optical disk of the invention has both a secret key cipher 
recording portion 879 and a public key ciphertext recording 
portion 880. The manufacturing method will be described 
later with reference to FIG. 29. First when reproducing the 
optical disk of FIG. 39 on a first-generation reproduction 
apparatus equipped with a secret key cipher decoder 881. the 
first physical feature information (corresponding to the 
encrypted version of the position information) unique to the 
legitimate disk is read from the secret key cipher recording 
portion 879 on the disk, and decrypted by the secret key 
cipher decoder 881 into plaintext. Further, the second physi- 
cal feature information (corresponding to the measured 
position information) of the disk is measured, and the two 
kinds of physical information are compared. 

In the case of a legitimate disk, the disk is normally 
reproduced since the two kinds of physical feature informa- 
tion agree, as shown in step 878c. 

In the case of a pirated disk, since they do not agree as 
shown in step 878c, the reproduction of the disk is pre- 
vented. That is. the reproduction is prevented as long as the 
secret key cipher remains unbroken. If it is broken some 
time in the future by a pirate, as earlier described, the pirate 
can produce illegal disks in large quantities by illegally 
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creating the secret key cipher. In that case, since the secret 
key decoder 881 in the first-generation reproduction appa- 
ratus checks only the secret key cipher, the comparison 
checks OK as shown in step 87&/. allowing the illegal 
pirated disk to be reproduced. However, by that time in the 
future, second-generation reproduction apparatus having a 
public key cipher decoder 882 will have become a predomi- 
nant type; therefore, reproducing pirated disks on the first- 
generation reproduction apparatus in an illegal manner will 
not have a significant impact. 

Since the legitimate disk of the invention has public key 
cipher, the disk is normally reproduced on the second- 
generation reproduction apparatus, as shown in step 878fc. 
On the other hand, when a pirated disk is inserted for 
reproduction, the reproduction apparatus checks only the 
public key cipher, as shown in step 878e, whether the secret 
key cipher is deciphered or not. As a result the anti-piracy 
function of the public key cipher works, as shown in step 
878«, so that the reproducing of the pirated disk on the 
second-generation reproduction apparatus is almost per- 
fectly prevented. 

According to the invention, all disks are manufactured 
with both the secret key cipher 879 and public key cipher 
880 prewritten thereon from the time of commercial intro- 
duction of the first-generation reproduction apparatus. 
Therefore, in the first stage, piracy prevention at the secret 
key cipher level is provided since the ciphertext can be 
processed by the 8-bit microcomputer mounted in the first- 
generation reproduction apparatus. In the second stage, that 
is, in the future when the secret key cipher may have be 
broken, more sophisticated piracy prevention can be pro- 
vided by the public key cipher decoder incorporated in the 
second-generation apparatus which will have become the 
rredominant type by that time. In this way, if one generation 
is replaced by the next generation, perfect compatibility with 
earlier media can be preserved uninterruptedly with the 
second-generation reproduction apparatus achieving nearly 
perfect piracy prevention. 

The above has described an example of application to the 
low reflectivity marking method, that is. the piracy preven- 
tion method at the reflective layer level, but it will be 
appreciated that the effect of preserving compatibility at the 
time of generation change can also be obtained if the same 
is applied to the piracy prevention method at the master disk 
level that uses the physical feature information of the master 
disk as shown in FIG. 13. 

The above-illustrated example has the feature that when 
performing encryption, the same information is encrypted 
by using a public key encryption function and a secret key 
encryption function separately, and the respectively 
encrypted versions of the information are recorded on the 
disk. 

Accordingly when a transition is made in future from the 
current player equipped with a decoder, based on an 8-bit 
microcomputer, for decoding the ciphertext created using a 
secret key encryption function to the future player equipped 
with a decoder, based on a 32-bit microcomputer, for decod- 
ing the ciphertext created using a public key encryption 
function, the optical disk as described in the above example 
can be used effectively on either type of player. 

(B) Other mechanisms will be described. 

(a) We will describe another specific example of the 
public key/secret key combination type in which the soft- 
ware feature information, ID number, and marking position 
information are encrypted (see FIG. 29). The ID number 
refers to the number assigned to each disk for identifying the 
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disk. The disk ED (also called the disk ID number) to be 
described later is the same in meaning to the ID number. 
Major differences between the present example and the 
foregoing specific example (see FIGS. 32. 36. and 37) are: 
(1) In the foregoing specific example, the software feature 
information is written on the master disk as the first 
ciphertext and the marking position information is 
written on a pressed disk as the second ciphertext. 
while in the present example, the software feature 
information, the ID number, and the marking position 
information are all combined together for encryption 
and the encrypted text is written on an already pressed 
disk; (2) In the foregoing example, two- stage encryp- 
tion is performed using the master secret key and sub 
secret key, while in the present example, encryption is 
performed only with master secret key without using a 
key corresponding to the sub secret key. 
More specifically, as shown in FIG. 29, the above com- 
bined signal is encoded in a secret key encryption section 
832 by using a secret key 834 for secret key encryption. The 
same combined signal is also encoded in a public key 
encryption section 831 by using a secret key 833 for public 
key encryption. In this way. public key cipher is used in 
conjunction with secret key cipher. This overcomes the 
problem that the current reproduction apparatus can only 
decode the secret key cipher because of the slow processing 
speed of its microcomputer. Future reproduction apparatus 
will use a higher- speed microcomputer, for example, of 
32-bit configuration and performs a piracy check by decod- 
ing only the public key cipher having a higher degree of 
security; therefore, piracy can be prevented almost perfectly. 
If the secret key cipher is broken some time in the future, 
since the public key-type player will be the predominant 
type by that time, substantial prevention of piracy can be 
accomplished. By recording the public key cipher simulta- 
neously with the secret key cipher on the media, if a 
transition occurs from the current generation to the next- 
generation player, the media can be reproduced on repro- 
duction apparatus of old generation while substantially 
achieving piracy prevention. 

(b) Next, a modulation recording method for barcode will 
be described in detail with reference to the same figure. 

In FIG. 29. a barcode recording apparatus (PWM record- 
ing apparatus) 845 is used to write the encrypted information 
onto the disk. 

First information concerning the position of the nonre- 
flective portion 815 formed on the reflective layer 802 or on 
the second reflective layer 825 is detected using optical mark 
position detecting means 600. The method of detection has 
already been described with reference to FIG. 15. etc.. and 
therefore, explanation will not be repeated here. The optical 
mark position information, the software feature information 
and the ID number generated by ID generator 546 are 
combined by combining means 830. The software feature 
information is obtained by feature-extracting from a part of 
the software contents using a one-direction hash function 
such as SHA. and by obtaining a hash value of 128 bits or 
160 bits. The ED number generator 546 has already been 
described with reference to FIG. 14, and therefore, expla- 
nation will not be repeated here. In the encryption section 
830. the combined signal of the physical feature information 
is encoded in the public key encryption section 831. such as 
RSA. by using the secret key 833 for public key encryption. 

The above public key cipher and the secret key cipher are 
combined in a combining section 835. and are affected with 
interieaved/Reed-Soiomon error corrections by a Reed- 
Solomon encoder 838 and an interleaver 839 in an error- 



31 

correcting encoder 837 of a recording circuit 836. The 
interleave length in this case is so set as to be able to correct 
a burst error due to a disk scratch 2.38 mm or longer, the 
same level as the CD, thereby resulting such effect to 
provide error correction of errors in the barcode recorded 
data of the invention against a disk scratch that may be 
caused in the worst condition in consumer use. 

The principle of the pulse width modulation method will 
be described with reference to the same figure. This method 
eliminates the need for the first ciphertext by the master 
secret key and the second ciphertext by the sub secret key. 
In this method, the software feature information, the position 
information, and the ID number are combined together for 
encryption. Billions of ROM disks are produced annually. 
Therefore, there is a possibility that a disk that happens to 
have a marking whose position pattern is very easy to 
duplicate may be produced. A pirated disk could be pro- 
duced by using a combination of this easily duplicatable 
marking position information and the legitimate ciphertext 
of this position information. In FIG. 29. the position infor- 
mation is combined with the software feature information 
for encryption or for authentication by signature. The posi- 
tion information is therefore inseparable from the software 
feature information. This means that if an easily duplicatable 
mark happens to be produced, it is only possible to produce 
pirated disks having corresponding software contents, so 
that potential damage will be greatly limited. It will be 
recognized here that this ciphertext may be recorded on the 
master disk. 

The error-correction coded signal is modulated into a 
PWM signal by a pulse interval modulator 840. When 
describing lines by using a laser, it is difficult to construct a 
barcode by accurately controlling the line width. Therefore, 
in the present invention, the pulse interval is classified into 
four values IT, 2T, 3T, and 4T, as shown in FIG. 30. and by 
encoding marks 8436. 843c, 843o\ and S43e as 00. 01. 10. 
and 11. for example. 2-bit data can be transmitted with one 
barcode. As shown in a table 842 showing the relationship 
between line width and recording rate in FIG. 30, when 
recording a PIM barcode in a lead-in area of the ROM disk 
800 with line width 10 urn, it can be seen that 5.6 kbits of 
information can be written additionally on the completed 
disk in one revolution. 

Part ( 1) of FIG. 31 shows a nonreflective portion detection 
signal 

The signals have a synchronizing signal area 858, con- 
sisting of three pulses 857a, 8576, and 857c with interval T; 
this area indicates the starting position. This is followed by 
a blank of 4T which is a reference time area for measuring 
reference time T. When the line width is 10 um. T=20 urn. 
Next comes a first recording area 860 of about 1 kbits for 
holding secondary-recorded data. Then, preceded by a blank 
861a of 100 um or greater length, there is recorded a second 
recording area 862a for tertiary-recorded data. A password 
for descrambling, etc. are recorded at a dealer. 

(c) The following describes the method of use of the 
barcode which can secondary- and tertiary-record by the 
HMST method. 

As shown in FIG. 35, in process (2). the software maker 
may produce a disk 8446 on which the ID number unique to 
the disk and a private key used for secret communication 
with a user are recorded. The disk 844c, S44d can be 
reproduced without requiring any special procedure. 

As shown in FIG. 21 to be described later, a recording/ 
reproduction circuit implementing the HMST method of the 
invention can be constructed by replacing an MFM 
modulation/demodulation magnetic head in a magnetic 



32 

recording/reproduction circuit by a PWM (PIM) 
modulation/demodulation laser. 

(d) Another specific example of disk manufacturing is 
shown in FIG. 35. That is, in process (3) of FIG. 35. which 
shows another application of the disk, information of 
scrambled MPEG video signal or the like is recorded on a 
disk 844e. A brief operational description of MPEG scram- 
bling will be given below. An MPEG compressed video 
signal is split between a variable-length encoder for AC 
components and a fixed-length encoder, each containing a 
random number adder, for scrambling. In the present 
invention, a descrambling signal is encrypted by an encryp- 
tion encoder using a one-direction function. Further, a 
portion of a compression program in an image compression 
controller is compressed by the encryption encoder. This 
makes it difficult for a replicating company to exchange the 
encryption encoder with an illegal one. Accordingly, only 
legitimate disks are decrypted with sub public key. 

Referring back to FIG. 35. we will describe next how the 
disk S44e manufactured in the above process (3) is pro- 
cessed in the next process (4) and later processes. 

That is, in process (4) of FIG. 35. using a master secret 
key the software company encrypts the disk ID number and 
a sub public key for decoding the descrambling signal, and 
secondary-records the encrypted text by barcude on the disk, 
thus completing the disk 844/. Since the disk 844/ are 
scrambled, the disk cannot be reproduced as is. The disk ID 
number mentioned here is the same in meaning as the 
previously described ID number. In process (5). after receiv- 
ing money for the disk from a customer, the dealer generates 
a password by using the disk ID number with the sub secret 
key corresponding to the sub public key, and tertiary-records 
the password on the disk Once the password has been 
recorded the disk 844^ can be reproduced on a reproduction 
apparatus by descrambling the data. In the case of a com- 
puter program, the program can be installed. With this 
method, if someone shoplifts a disk, images or software on 
the disk cannot be reproduced since image scrambling and 
ciphertext are not unlocked. This defeats the effort of a 
shoplifter, and thus has the effect of preventing shoplifting. 

(e) We interrupt here our explanation relating to FIG. 35, 
and refer back to FIG. 21 to describe the operation and 
configuration of a reproduction apparatus incorporating a 
recording circuit, as shown, concentrating on magnetic 
recording and reproduction circuits which in combination of 
an optical reproduction apparatus constitute a recording/ 
reproduction circuit In FIG. 21, a combination of the 
magnetic recording and reproduction circuits, and optical 
reproduction apparatus is shown, but instead, a combination 
of an ordinary optical reproduction apparatus and a floppy 
disk drive may be used. 

In the figure, the magnetic reproduction circuit has two 
demodulators, an MFM demodulator 2fod and a second 
demodulator 6b2(sic) which is another type to MFM. one or 
the other of which is selected by a selector 661. The 
corresponding modulator is kept only at the factory, so that 
a full recording capability is not provided although repro- 
duction is possible. Accordingly, when a specially modu- 
lated area was recorded at the factory, a specially modulated 
signal is not recorded. CPU 665 on the drive side performs 
control so that no recording can be made unless the specially 
modulated signal is reproduced from this area. Therefore, it 
can be said that this area is a logical write-once area, 
permitting recording only once. Accordingly, once the 
machine ID, such as a drive ID 699a recorded in a ROM 699 
in the reproduction apparatus, has been recorded in this 
write-once area of a magnetic recording portion on an 
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optical disk or a floppy disk, the user drive cannot alter the 
recorded contents, thus preventing illegal installation on 
more machines than a permitted number of machines. The 
drive ID mentioned here is a number assigned to each 
reproduction apparatus for identifying the apparatus. The 
machine ED may be an ID assigned to a personal computer. 
A network interface section 14 examines an HDD. etc. on a 
second personal computer 663 connected to a network 664 
and supervises the operation so that the program of the same 
drive ID or same machine ID will not be started or run. thus 
preventing the use of illegally copied software. 

The laser marking recording method of the invention 
permits secondary recording such as recording of a dealer 
code at a dealer, as does a magnetic method. This, however, 
does not constitute a feature of the present invention, and 
therefore, detailed explanation will not be given here. 

In the case of a rental video store, if a password were 
recorded permanently on a disk, and if the disk were 
shoplifted, the shoplifter could play back that disk. To 
prevent this, a rental video store hands a scrambled disk 844/ 
to a customer, as shown in process (6). In step 85 1#. a 
password for descrambling is computed from the disk ID or 
the drive ID described later by using a sub secret key. In step 
851/, the password is printed on the receipt which is handed 
to the customer. The password may be notified to the 
customer by telephone, as shown in step 85 lu. 

The customer performs the descrambling operation 
shown in step 851r on his reproduction apparatus in his 
home. First, in step 8515, the scramble identifier and the 
software feature information are decrypted from the cipher- 
text by using the sub public key. The decrypted software 
feature information is compared with the software feature 
information that was actually extracted from the software 
contents by using a one-direction hash function, to verify 
whether they agree or not. If verification cannot be done, the 
disk is regarded as an illegal one, and the reproduction is 
stopped. If the scramble identifier is OFF in step 85Lt. the 
reproduction operation is permitted in* step 851/?. If the 
scramble identifier is ON, the user enters a password from 
a numeric keypad in step 85U, and the password is com- 
puted using the sub public key. In step 851r, a further 
computation is performed using the disk ID and/or drive ID. 
and only when the result of the password computation 
agrees with the disk ID or drive ID, the scramble or 
ciphertext is unlocked to permit reproduction or operation 
for a prescribed number of days. When the disk has been 
rented out with a password only for a portion of the software 
to the customer, if the customer desires to view other items 
in the software, the customer can request by telephone the 
key issuing center to issue the password for the desired 
software item; the password is then notified to the customer 
in step 85 lu and input in step 851fc to enable the desired 
software on the disk to be reproduced. 

The operation performed at the video retail store or rental 
video store in processes (5) and (6) in FIG. 35 will be 
described in further detail with reference to EEC 34. The 
video retail store receives a scramble- or encryption-applied f 
disk 844/, and after confinning payment from the user, J 
transmits the disk ED number and sub public key data of the ! 
disk 844/ from a barcode recording/reproduction apparatus j 
845 to a password issuing center 852 via a POS terminal j 
846. In the case of a small shop system, the password issuing 
center, that is, the system containing the sub secret key for 
the sub public key, may be contained in the POS terminal. 
The password issuing center inputs the disk ID number and 
time information in step 85 Lj. performs computation in step 
851^, performs encryption with the sub secret key in step 
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85 If. and issues a password in step 85 lg. The password is 
then transmitted via a network 848 and the POS terminal 846 
to the barcode recording apparatus 845, and the disk 844g 
with the password recorded thereon is handed to the cus- 
tomer. This disk 844# can be reproduced as is. 

Next, the operation performed at the rental store will be 
described in detail. First, a ROM disk 844/ locked with 
scrambling is displayed on the store shelf. When the par- 
ticular ROM disk 844/ is specified by a customer, a shop 
clerk holds in his or her hand a circular barcode reader 850 
with a built-in rotary-type optical head 853 generating a 
spiral scanning pattern, and presses it onto the center of the 
disk 800 housed in a transparent case, to read the barcode 
formed by nonreflective portions 815 on the reflective layer 
in the disk 844/ thereby reading the disk ID number. The 
product code may be read either from the barcode of the 
invention formed by the nonreflective portions 815 or from 
the circular barcode prerecorded and pressed by the existing 
recording method on an inner ring portion inside the pit 
recording area of the master disk. These items of informa- 
tion are processed by the POS terminal 846. and the rental 
charge is settled: at the same time, the password correspond- 
ing to the disk ID number is issued in step SSlg. as 
previously described. For rental purposes, to limit the num- 
ber of days for viewing, time information, as used in step 
85 lr. is appended to the disk ID number for encryption, and 
the password is thus created. This password is valid for a 
preset number of days, the effect being that in the case of a 
rental disk a rental period of 3 days, for example, can be set 
in the password. 

In step 851/. the thus issued password for unlocking the 
scramble, the date of rent the expected data of return, and 
the rental charge of the title are printed on a receipt 849 
which is handed to the customer together with the disk. The 
customer takes the disk 844/ and receipt 849 home. When, 
in step 85 lk. the password is input from an input section 
854, such as a numeric keypad, on the information process- 
ing apparatus 676 shown in FIG. 25, the password is, 
computed with the disk ID number and is input to a master 
cipher decoder 534 where the encrypted data is decoded into 
plaintext by using a public key. This plaintext is checked in 
a plaintext data checking section 715 to determine whether 
it satisfies a predetermined condition; only when the pass- 
word is correct, program data is descr ambled by a sub cipher 
decoder 718. and the video image is output 

In this case, if the password contains time information, 
date data from a clock section 855 is checked, and descram- 
bling is allowed as long as the date data matches the time 
information. The password and its corresponding ID number 
are stored in a nonvolatile memory 755<a in a memory 755. 
Once the password has been entered, the user need not 
reenter it to perform descxambling. In this way, the key on 
a disk can be locked and unlocked by electronic means, 
which offers an advantage for distribution business. 

The foregoing embodiments have been described refer- 
ring mainly to the disk ID method wherein a disk ID is 
appended to a disk. However, in the case of disks that do not 
have disk IDs, it becomes necessary to use the drive ID of 
the drive. The following description deals in detail with the 
descrambling, password creation, and checking operations 
when the drive ID alone is used and also when both the drive 
ID and disk ID are used. 

In FIG. 35, when using a password relating to the drive ED 
for descrambling the software, the drive ID 699a stored in 
a ROM in the reproduction apparatus is transmitted from a 
signal section 85 lz in FIG. 34 to the password issuing center 
by telephone or via personal computer communication. In 
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the password issuing center, using the drive ID and the 
software ID in step 851^ computation is performed in step 
85 Is. and the result is encrypted with sub secret key in step 
85 It. thereby creating a password in step 85 Ig. In step 85 lu, 
the password is transmitted to the communication section 
85z(sic) in the reproduction apparatus including the user's 
personal computer, by telephone or via personal computer 
communication. The user enters the password in step S51L 
and decryption computation is performed using the sub 
public key in step 851m, In step 851r. the drive ID is 
compared with the result of the computation, and if they do 
aot match, the operation is stopped. If they match, repro- 
duction or operation is performed in step 85 Ip. 

The advantages and disadvantages of the drive ID method 
and the disk ID method will be described. When the disk ID 
is used, the password is valid only for one particular disk. 
The disk can be run on any drive. This method is therefore 
suitable for movie software and the like. However, in the 
case of business software for personal computers, if the 
software can be installed on any drive, the software on the 
disk may be illegally copied onto more than one computer. 

That the disk can be run only on one drive is a disadvan- 
tage of the drive ID method in the case of movie software. 
This, however, becomes an advantage in the case of personal 
computer software. For business software that need only be 
installed once, the drive ID method has an advantage in that 
its password-protect unlocking feature prevents the software 
from being illegally installed on a personal computer by 
using other drives than the one designated drive. 

However, the drive ID is written in an EPROM in the 
machine, and can be easily altered. If drives of the same 
drive ID are sold, illegal installation may be made on many 
machines. On the other hand as already described, it is 
difficult to alter the disk ID of the present invention. In FIG. 
34, if provisions are made to create a password for both disk 
ID and drive ID in step $51q and to check both IDs in step 
851/, the disk ID is prevented from being altered. The 
resulting effect is that if drives of the same drive ID are 
distributed in large quantities, since the disk ID is valid only 
for one particular disk, illegal installation on many machines 
is suppressed. 

As described above, die drive ID method and the disk ID 
method have their own advantages and disadvantages, and 
the advantages are different for different applications. It is 
expected that the drive ID method will be used for computer 
software that is installed only once, and the disk ID method 
for movie or music software that is reproduced many times. 
This requires that the reproduction apparatus be designed to 
support both methods. Using the flowchart of FIG. 42. we 
will describe an operational procedure that handles both the 
drive ID and disk 3D. When installation is started, first the 
scramble identifier is checked in step 901a whether it is ON 
or not. If the software is scrambled and the identifier is OFF. 
this means an illegal operation, and the installation stops. 
The installation also stops if the identifier is ON though the 
software is not scrambled. As already described, this 
scramble identifier cannot be altered and is therefore effec- 
tive in preventing illegal installation. In step 901c, the 
personal computer is connected to the password issuing 
center via a network. In step 90 Id, user 3D is entered, and 
in step 90 le, if the reproduction apparatus has a drive ID, the 
drive ID is transmitted to the password issuing center. After 
confirming payment the password issuing center performs 
encryption and computation on the drive ID and software ID 
by using a sub secret encryption key, to generate a password. 
The personal computer at the user end performs computation 
to decrypt the password by using a sub public key, and 
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compares it with the machine ID of the personal computer 
or the drive ID of the drive. If they do not match, the 
operation stops; if they match, the installation program is run 
in step 901/i. In the above case, that is, when computing the 
password with the drive ID in step 90 lk. a program decryp- 
tion key may be output to accomplish decryption or 
descrambling. 

Turning back to step 901<?. if there is no drive ID. then it 
is checked in step 901>z whether a disk ID is recorded on the 
| disk, and if there is no disk ID. the installation stops. If a disk 
ID is recorded, the disk ED and the software ID are trans- 
mitted to the password issuing center. The password issuing 
center communicates with a credit company, and after 
confirming online payment by credit creates a password in 
step 901/ from the disk ID and software ID by using the sub 
secret key. The personal computer at the user end decrypts 
the password by using the sub public key in step 901/n. and 
if the result checks OK, program installation or software 
reproduction is carried out. 

In this way. both the drive ID and disk ID can be handled. 
This has the effect of preventing illegal installation while 
allowing legitimate installation of software products having 
various IDs. 

Thus by encrypting the disk physical ID by a one- 
direction encryption encoder, copy protection security can 
be enhanced. 

As described above, according to the present 
embodiment, a nonreflective portion is formed on a reflec- 
tive layer in an optical disk consisting of two disks laminated 
together, and at least its position information is encrypted 
and written on the same optical disk. This makes duplication 
much more difficult as compared to the prior art. Production 
of illegal copies, that is, so-called pirated disks, can thus be 
made virtually impossible. 

As is apparent from the description so far given, the 
present invention has the advantage of achieving a greatly 
improved copy prevention capability as compared to the 
prior art 

Furthermore, according to the present invention, a piracy 
check mechanism can be incorporated into the master disk 
by encrypting formatted master disk physical feature infor- 
mation 876 in combination with public key data and soft- 
ware feature information, as described with reference to 
FIG. 32. etc. This further increases security. 

In FIG. 26, a method was disclosed mat provides greater 
network security for online shopping companies. According 
to this method, the online shopping company secondary- 
records the private key for secret communication on all disks 
and distributes it to users, eliininaring the need for sending 
the private key to the user by mail and also saving the user 
the trouble to key in the private key of many digits. 
Furthermore, since the user need not enter the private key by 
himself, a large numeric value consisting of 100 or more 
digits can be used as the private key. This greatly improves 
network security. 

In the above embodiment, the marking position informa- 
tion of the invention was written on the same disk, but the 
invention is not limited to the illustrated example. For 
example, the information may be written on a floppy disk as 
a different medium. 

Furthermore, in the above embodiment, examples have 
been described wherein an elliptic function or an RSA 
function is applied to the digital signature or digital 
signature-like technique or encryption technique. However, 
the invention is not limited to the illustrated examples; 
rather, any other encryption technique may be used 

Moreover, in the above embodiment, the position infor- 
mation was encrypted or was provided with a digital 
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signature, but instead, the position information itseif may be 
written directly on the disk. In that case also, the invention 
is effective in preventing pirated disks from being made by 
copying the marking and its position information. 

The optical disk of the invention has a structure such that 
a reflective film is sandwiched directly or indirectly between 
two members resistant to laser light and a marking is formed 
by laser on the reflective film The above embodiment has 
described examples in which this structure is used for a 
piracy prevention technique, but it will be appreciated that 
such a structure may also be applied to other techniques. In 
the above embodiment the optical disk of the invention has 
been described as being fabricated by laminating two sub- 
strates with an adhesive layer interposed therebetween. 
However, the adhesive layer may be omitted, or instead, a 
member made of a different material, such as a protective 
layer, may be used; that is. any suitable structure may be 
used as long as the reflective film is sandwiched directly or 
indirectly between two members resistant to laser light. 
Furthermore, in the above embodiment, the optical disk of 
the invention has been described as comprising substrates as 
the members that are laminated together, but other members 
such as protective layers may be used; that is. any member 
that has resistance to laser light may be used 

In the above embodiment, a combination of two kinds of 
cipher, secret key cipher and public key cipher, has been 
described as a representative example of a combination of 
multiple kinds of ciphers of different generations, but the 
invention is not limited to this particular example. For 
example, as an alternative combination of different 
generations, public key cipher having a 256-bit secret key, 
which is less secure but can be processed by a slow CPU. 
and public key cipher having a 1024-bit secret key. which 
provides great security but can only be processed by a 
high-speed CPU, may be used In this way, with a combi- 
nation of public key ciphers having different security levels, 
the same effect of preserving compatibility between different 
generations can be obtained. Furthermore, a combination of 
three kinds of ciphers of different generations, such as secret 
key cipher, low-security public key cipher, and high-security 
public key cipher, may also be used. 

What is claimed is: 

1. A marking forming apparatus comprising: 
marking forming means for applying at least one marking 

to at least one reflective fUm formed to a disk; 

marking position detecting means for detecting at least 
one position of said marking; and 

position information output means for outputting said 
detected position as position urforrnation of said mark- 
ing. 

2. A marking forming apparatus according to claim 1. 
further comprising position information writing means for 
writing at least said output position information or informa- 
tion concerning said position information to said disk or to 
a different medium. 

3. A marking forming means according to claim 2, 
wherein said position information writing means includes 
encrypting means for encrypting at least said output position 
information or information concerning said position 
information, and writes contents thus encrypted to said disk 

4. A marking forming apparatus according to claim 3. 
wherein when the encrypting means performs the 
encryption, it uses a secret key of a public key encryption 
function. 

5. A marking forming apparatus according to claim 3, 
wherein said encrypting means includes 

first encrypting means for encrypting software feature 
information concerning features of software contents 
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written to said disk and a sub public key of a public key 
encryption function by using a master secret key of said 
public key encryption function, and 

second encrypting means for encrypting said position 
information or information concerning said position 
information by using a sub secret key corresponding to 
said sub public key, 

and the writing at least said output position information or 
information concerning said position information 
1 means writing contents encrypted by said first encrypt- 
ing means and contents encrypted by said second 
encrypting means to said disk. 

6. A marking forming apparatus according to claim 2. 
wherein said position information writing means includes 

' digital signature means for applying a digital signature to at 
least said output position information or information con- 
cerning said position information. 

and the writing at least said output position information or 
information concerning said position information 
J means writing information concerning a result of said 
digital signature application to said disk. 

7. A marking forming apparatus according to claim 6, 
wherein when said digital signature means applies said 
digital signature, it uses a secret key of a public key 
encryption function. 

8. A marking forrning apparatus according to claim 6, 
wherein 

said digital signature means includes 
first digital signature means for applying a digital 
signature to software feature inf ormation concerning 
features of software contents written to said disk and 
to a sub public key of a public key encryption 
function by using a master secret key of said public 
key encryption function, and 
second digital signature means for applying a digital 
signature to said position information or information 
concerning said position informatioa by using a sub 
secret key corresponding to said sub public key, 
and the writing at least said output position information or 
information concerning said position information 
means writing a result of the application of said digital 
signature by said first digital signature means and a 
result of the application of said digital signature by said 
second digital signature means to said disk. 

9. A marking forming apparatus according to claim 2, 
wherein the position information writing means writes coex- 
istently such informations that are processed by using plural 
kinds of encryption techniques or digital signature tech- 
niques with regard to a same position information. 

10. A marking forrning apparatus according to claim 4. 5, 
7, or 8, wherein said public key encryption function is an 
RSA function or an elliptic function. 

11. A marking forming apparatus according to claim 10. 
wherein said disk is constructed by laminating two disks 
together. 

12. A method of forming a laser marking to an optical 
disk, comprising the steps of: 

forming at least one disk; 

forming a reflective film to said formed disk; 

laminating two disks together, said disks including at least 

one disk with said reflective film formed thereon; and 
forming at least one marking by a laser on said reflective 

layer of the laminated disks. 

13. A reproduction apparatus comprising: 

position information reading means for reading position 
information of at least one marking or information 



concerning said position information, said marking 
being formed to at least one reflective film formed to a 
disk and being detected for a position thereof, at least 
the position thus detected being output as said position 
information of said marking; 

marking reading means for reading information concern- 
ing at least one actual position of said marking; 

comparing/judging means for performing comparison and 
judgement by using a result of reading by said position 
information reading means and a result of reading by 
said marking reading means; and 

reproducing means for reproducing recorded data on said 
optical disk in accordance with a result of the compari- 
son and judgement performed by said comparing/ 
judging means. 

14. A reproduction apparatus according to claim 13. 
wherein at least said output position information or infor- 
mation concerning said position information is written to 
said disk by position information writing means. 

15. A reproduction apparatus according to claim 14. 
wherein 

said position information writing means includes encrypt- 
ing means for encrypting at least said output position 
information or information concerning said position 
information, and 

said position information reading means includes decrypt- 
ing means corresponding to said encrypting means, and 
by using said decrypting means, decrypts said 
encrypted position information or information concern- 
ing said position information. 

16. A reproduction apparatus according to claim 15, 
wherein when the encrypting means performs the 
encryption, it uses a secret key of a public key encryption 
function, and 

said decrypting means performs the decryption by using 
a public key corresponding to said secret key. 

17. A reproduction apparatus according to claim 15. 
wherein 

said encrypting means includes 

first encrypting means for encrypting software feature 
information concerning features of software contents 
written to said disk and a sub public key of a public 
key encryption function by using a master secret key 
of said public key encryption function, and 

second encrypting means for encrypting said position 
information or information concerning said position 
information by using a sub secret key corresponding 
to said sub public key, 
and said decrypting means includes 

first decrypting means for decrypting said encrypted 
software feature information and the encrypted sub 
public key of said public key encryption function, by 
using a master public key corresponding to said 
master secret key, and 

second decrypting means for decrypting said encrypted 
position information or information concerning said 
position information by using the sub public key thus 
decrypted. 

18. A reproduction apparatus according to claim 14. 
wherein 

said position information writing means includes 
digital signature means for applying a digital signature 
to at least said output position information or infor- 
mation concerning said position information, and 
writes information concerning a result of said digital 
signature application to said disk. 
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and said position information reading means includes 
authenticating means corresponding to said digital 

signature means, and 
position information extracting means for obtaining 
said position information from an authentication 
process performed by said authenticating means 
ancVor from said information concerning the result 
of said digital signature application, 
when an output indicating correctness of said authen- 
tication result is produced from said authenticating 
means, said comparing/judging means performs the 
comparison and judgement by using the position 
information obtained by said position information 
extracting means and the result of reading by said 
marking reading means, and when said output indi- 
cating correctness is not produced, the reproduction 
is not performed. 

19. A reproduction apparatus according to claim 18. 
wherein 

when said digital signature means applies said digital 
signature, it uses a secret key of a public key encryption 
function, and 

said authenticating means performs said authentication by 
using a public key corresponding to said secret key. 

20. A reproduction apparatus according to claim 18, 
wherein 

said digital signature means includes 
first digital signature means for applying a digital 
signature to software feature information concerning 
.features of software contents written to said disk and 
to a sub public key of a public key encryption 
function by using a master secret key of said public 
key encryption function, and 
second digital signature means for applying a digital 
signature to said position information or information 
concerning said position information by using a sub 
secret key corresponding to said sub public key, 
and the writing at least said output position information or 
information concerning said position information 
means writing a result of the application of said digital 
signature by said first digital signature means and a 
result of the application of said digital signature by said 
second digital signature means to said disk, 
wherein said position information reading means 
includes; 

authenticating means for authenticating said digital 
signature-applied software feature information and 
sub public key of said public key encryption 
function, by using a master public key corresponding 
to said master secret key. and 
position information extracting means for obtaining said 
position information from said authentication process 
thereof and/or from the result of said digital signature 
application by using the sub public key obtained from 
said authentication process and/or from the result of 
said digital signature application, 
and when an output indicating correctness of said authen- 
tication result is produced from said authenticating 
means, said comparing/judging means performs the 
comparison and judgement by using the position infor- 
mation obtained by said position information extracting 
means and the result of reading by said marking 
reading means, and when said output indicating cor- 
rectness is not produced, the reproduction is not per- 
formed 

21. A reproduction apparatus according to any one of 
claims 13 to 20. wherein the reproduction is not performed 
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when, as a result of said comparison and judgement, the 
result of reading by said position information reading means 
and the result of reading by said marking reading means do 
not agree with each other. 

22. A reproduction apparatus according to claim 16. 17, 
19. or 20. wherein said public key encryption function is an 
RSA function or an elliptic function. 

23. A method of manufacturing an optical disk, compris- 
ing the steps of: 

forming at least one disk; 
forming a reflective film to said formed disk; 
applying at least one marking to said reflective film; 
detecting at least one position of said marking; and 
outputting said detected position as position information 

of said marking, and encrypting said information for 

writing to said disk. 

24. A method of manufacturing an optical disk, compris- 
ing the steps of: 

forrning at least one disk; 

forming a reflective film to said formed disk; 

applying at least one marking to said reflective film; 
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detecting at least one position of said marking; and 
outputting said detected position as position information 
of said marking, and applying a digital signature in 
relation to said position information for writing to said 
disk. 

25. An optical disk wherein at least one marking is formed 
by a laser to at least one reflective filra of the disk holding 
data written thereon and at least position information of said 
marking or information concerning said position informa- 
tion is written to said disk in an encrypted form or with a 
digital signature applied thereto, 

26. An optical disk having a structure such that at least one 
reflective film is one of sandwiched directly and sandwiched 
indirectly between two members formed from material 
resistant to laser light. 

wherein at least one marking is formed by a laser to said 
reflective film. 

27. A marking forming apparatus according to claim 9. 
wherein said disk is constructed by laminating two disks 
together. 



1 28. An optical disk 

2 comprising: 

3 an embossed data zone having 

4 pits and projections indicating data signals 

5 readable by light irradiation; and 

6 a barcode pattern indicating 

7 information formed on said embossed data 

8 zone. 

1 29. A method for 

2 manufacturing an optical disk, comprising the 

3 steps of: 

4 forming, on a substrate, an 

5 embossed data zone having pits and 

6 projections indicating data signals readable 

7 by light irradiation; and 

8 forming a barcode pattern 

9 indicating information on said embossed data 

10 zone. 
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Valley Forge 



State 



PA 



ZIP 19482 



Country 



Telephone 



610-407-0700 



Fax 



610-407-0701 



I hereby declare that all statements made herein of my own knowledge are true and that all statements made 
on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statements and the like so made are punishable by fine and imprisonment, 
or both, under 18 U.S.C. 1001 , and that such willful false statements may jeopardize the validity of the 
application, any patent issuing thereon, or any patent to which this declaration is directed. 



Full name of sole or first inventor (given name, family name) 


Mitsuaki Oshima 


Inventor's signature 


Residence ^ , T 

Kyoto, Japan 


Date 


Post Office Address 115-3, Minamitatsumi-cho, Katsura, 
Nishikyo-ku, Kyoto-shi, Kyoto 615, Japan 


Citizenship 

Japanese 


Full name of second joint inventor (given name, family name) 

Yoshiho Gotoh 


Inventor's signature 


Date 


Residence 

Osaka, Japan 


Citizenship 

Japanese 


Post Office Address 

Room 201, 9-17, Higashinkahama 4-chome, Jyoto-ku, Osaka-shi, Osaka 536, Japan 


Full name of third joint inventor (given name, family name) 


Inventor's signature 


Date 


Residence 


Citizenship 



Post Office Address 



| | Additional joint inventors are named on separately numbered sheets attached hereto. 
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PTO/SB/51 (12-97) 
- Approve?! for use through 9/30/00. OMB 0651-0033 
Patent and Trademark Office; U.S. DEPARTMENT OF COMMERCE 
Under_ the, Paperwork Reduction Act-Qf 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number 



REISSUE APPLICATION DECLARATION BY THE INVENTOR 



Docket Number (Optional) 
MTS-520US1 



As a below named inventor, I hereby declare that: 

My residence, post office address and citizenship are stated below next to my name. 

I believe I am the original, first and sole inventor (if only one name is listed below) or an original, first 

and joint inventor (if plural names are listed below) of the subject matter which is described and claimed 

in patent number 5,761,301 , granted June 2, 1998 ^ and f or which a 

reissue patent is sought on the invention entitled mark forming apparatus, method of forming laser 

MARK ON OPTICAL DISK, REPRODUCING APPARATUS , OPTICAL DISK AND METHOD OF PRODUCING OPTICAL DISK 

the specification of which 
is attached hereto. 

|^| was filed on June 2, 2000 as reissue application number 09 / 588,364 

and was amended on . 

(If applicable) 

1 have reviewed and understand the contents of the above identified specification, including the claims, 
as amended by any amendment referred to above. 

I acknowledge the duty to disclose information which is material to patentability as defined in 
37 CFR 1 .56. 

I verily believe the original patent to be wholly or partly inoperative or invalid, for the reasons described 
below. (Check all boxes that apply.) 

I l by reason of a defective specification or drawing. 

[x] by reason of the patentee claiming more or less than he had the right to claim in the patent. 
| | by reason of other errors. 

At least one error upon which reissue is based is described as follows: 

During the prosecution of the application that issued as the above patent, the inventors did not 
recognize that the features disclosed at page 31, line 23 to page 32, line 15 were appropriate to 
claim. As such, the inventors did not claim all that they had a right to claim. This error was made 
without deceptive intent. 



[Pagel of 2] 

Burden Hour Statement: This form is estimated to take 0.5 hours to complete. Time will vary depending upon the needs of the individual 
case. Any comments on the amount of time you are required to complete this form should be sent to the Chief Information Officer, 
Patent and Trademark Office, Washington, DC 20231. DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: 
Assistant Commissioner for Patents, Washington, DC 20231. 



: _ PTO/SB/51 (12-97) 

Approved for use through 9/30/00/ OMB 0651-0033 

Patent and Trademark Office, ILS. DEPARTMENT OF COMMERCE 
" Under the Paperwork Reduction Act of 1 995, no persons are required to respond to a collection of information unless it displays a valid OMB controt number. 



(REISSUE APPLICATION DECLARATION BY THE INVENTOR, page 2) 



Docket Number (Optional)- 
MTS-520US1 



All errors corrected in this reissue application arose without any deceptive intention on the part of the 
applicant. As a named inventor, I hereby appoint the following attorney(s) and/or agent(s) to prosecute 
this application and transact all business in the Patent and Trademark Office connected therewith. 



Name(s) 


Registration Number 


Allan Ratner 


19,717 


Jacques L. Etkowicz 


41,738 



Correspondence Address: Direct all communications about the applica4iefl|to: 

I I Customer Number 
OR 



Type Customer Number here 



Place Customer Number Bar 
Code Label here 



Firm or 
Xl individual Name 



Ratner & Prestia 



Address 



P.O. Box 980 



Address 



City 



Valley Forge 



State 



PA 



ZIP 19482 



Country 



Telephone 



610-407-0700 



Fax 



610-407-0701 



I hereby declare that all statements made herein of my own knowledge are true and that all statements made 
on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statements and thelike so made are punishable by fine and imprisonment, 
or both, under 18 U.S.C. 1001 , and that such willful false statements may jeopardize the validity of the 
application, any patent issuing thereon, or any patent to which this declaration is directed. 



Full name of sole or first inventor (given name, family name) 



Mitsuaki Oshima 



Inventor's signature / £/jf I //*") / ^ 



Residence 



Kyoto, Japan 



Date June 26, 2000 



Post Office Address 115-3, Minamitatsumi-cho, Katsura, 
Nishikyo-ku, Kyoto-shi, Kyoto 615, Japan 



Citizenship 



Japanese 



Full name of second joint inventor (given name, family name) 



Yoshiho Gotoh 



Inventor's signature 



Date 



June 26, 2000 



Residence 



Osaka^ Japan 



Citizenship 



Japanese 



Post Office Address 



Room 201, 9-17, Higashinkahama 4-chome, Jyoto-ku, Osaka-shi, Osaka 536, Japan 



Full name of third joint inventor (given name, family name) 



Inventor's signature 



Date 



Residence 



Citizenship 



Post Office Address 



| | Additional joint inventors are named on separately numbered sheets attached hereto. 
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Please type a plus sign (+) inside this Box 

Patent and TrademarVo^ OF OOmmCB 

Under the Paperwork Reduction Act of 1995, no persona are required Fo respond to a collection oflnformatien unless it e&roWs a 

valid QMS control number. 



PTO/SB/Q3Q (8-97) q 
Approved for usa through '#30/98^ 0MB ^?fSt*S2?« | 



DECLARATION 



REGISTERED PRACTITIONER 
INFORMATION 
(Supplemental Sheet) 



Name 



jKevin R, Casey 
[Benjamin E. Leace ^ 
I James C. Simmons 
J Lawrence E« Ashery 
Christopher R. Lewis 
[Robert L, Andersen 
[Daniel N> Calder 
Louis W> Beardell, Jr. 
Jacques L t Etkowicz 
[Jonathan H. Spadt 
[MarkL Marcelli 
J Joshua L> Cohen 
I Jack J. Jankovitz 
Christopher L Halliday 



Registration 
Number 



Name 



Registration 
Number 



32,117 

33,412 

24,842 

34,515 

36,201 

25,771 

27,424 

40,506 

41,738 

45,122 

36,593 

38,040 

42,690 

42,621 



Burden Hour Statement: This form is estimated to take 0.4 hours to complete. Time wiil vary depending upon the needs of the individual case. Any 
comments on the amount of time you are required to complete this form should be sent to the Chief Information Officer, Patent and Tradsmarit 
Office, Washington, DC 20231. DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Assistant Commissioner fer 
Patents, Washington, DC 20231. 
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PT0/SB/52 (08-99) 
Approved for use through 9/30/00. OMB 0651-0033 
Patent and Trademark Office, U.S. DEPARTMENT OF COMMENCE 
Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number. 



REISSUE APPLICATION DECLARATION BY THE ASSIGNEE 



Docket Number {optional) 
MTS-520US1 



I hereby declare that; 

My residence and post office address and citizenship are stated below next to my name. 

I am authorized to act on behalf of the following assignee: Matsushita Electric Industrial Co., Ltd. 

and the title of my position with said assignee is: Director 



The entire title to the patent identified below is vested in said assignee. 



Name of Patentee(s): 



Mitsuaki Oshima: Yoshiho Gotoh 



Patent Number 



5,761,301 



Date of Patent Issued 



June 2, 1998 



Title of Invention MARK FORMING APPARATUS, METHOD OF FORMING LASER MARK ON OPTICAL DISK, 

REPRODUCING APPARATUS, OPTICAL DISK AND METHOD OF PRODUCING OPTICAL DISK 



1 believe said patentee(s) to be the original, first and sole/joint inventor(s) of the subject matter which is 

described and claimed in said patent, for which a reissue patent is sought on the invention entitled 

See Attachment 



the specification of which 

D is attached hereto. 

r . f , June 2, 2000 . 09/588 364 
was filed on as reissue application number ' 



and was amended on 



(If applicab(e) 

I have reviewed and understand the contents of the above identified specification, including the claims, as 
amended by any amendment referred to above. 

I acknowledge the duty to disclose information which is material to patentability as defined in 37 CFR 1.56. 

I verily believe the original patent to be wholly or partly inoperative or invalid, for the reasons described 
below. (Check ail boxes that apply.) 

D by reason of a defective specification or drawing. 

® by reason of the patentee claiming more or less than he had the right to claim in the patent. 
D by reason of other errors. 
At least one error upon which reissue is based is described as follows: 

During the prosecution of the application that issued as the above patent, the inventors did not recognize 
that the features disclosed at page 31, line 23 to page 32, line 15 were appropriate to claim. As such, the 
inventors did not claim all that they had a right to claim. This error was made without deceptive intent. 

[Attach additional sheets, if needed.] 

Al! errors corrected in this reissue application arose without any deceptive intention on the part of the 
applicant. 



[Page 1 of 2] 

Burden Hour Statement This form is estimated to take 0.5 hours to complete Time will vary depending upon the needs of the individual case. Any comments 
on the amount of time you are required to complete this form should be sent to the Chief Information Officer, Patent and Trademark Office, Washington, DC 
20231 . DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Assistant Commissioner for Patents, Washington DC 20231 



" . PTO/SB/52 (08-99) 

Approved for use through 9/30/00. 0MB 0651-0033 
Patent and Trademark Office, U S. DEPARTMEN-^OF COMMERCE 
Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of mformatton unless it displays a valid OMB control number 



(REISSUE APPLICATION DECLARATION BY THE ASSIGNEE, page 2) 



Lawrence E. Ashery 


34,515 


Jacques L. Etkowicz 


41,738 


Jack J. Jankovitz 


42,690 



Docket Number (Optional ) 

MTS-520US1 



I hereby appoint the following attorney(s) and/or agent(s) to prosecute this application and transact 
aii business in the Patent and Trademark Office connected therewith. 

Name(s) Registration Number 

Allan Ratner 19,717 



Correspondence Address: Direct all communications about the application to: 
| [ Customer Number 



Type Customer Number Here 



OR 



Place Customer 
Number Bar Code 
Label Here 



Firm or 

Individual 

Name 



Ratner & Prestia 



Address 



P.O. Box 980 



Address 



City 



Valley Forge 



State pa 



Zip 19482 



Country 



Telephone 



(610) 407-0700 



Fax 



(610) 407-0701 



I hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these statements 
were made with the knowledge that willful false statements and the like so made are punishable by 
fine and imprisonment, or both, under 18 U.S.C. 1 001, and that such willful false statements may 
jeopardize the validity of the application, any patent issuing thereon, or any patent to which this 
declaration is directed. 



Full name of person signing (given name, family name) 




Osamu Yamazaki 




Signature ^*~~~Z> 


Date 




June 26, 2000 


Address of Assignee 




1006, Oaza Kadoma, Kadoma-shi, Osaka 571, Japan 


Patentee 


Citizenship 


Mitsuaki Oshima 


Japanese 


Residence/Post Office Address 1 15-3, Minamitatsumi-cho, Katsura, Nishikyo-ku } Kyoto-shi, Kyoto 615, Japan 


Patentee 


Citizenship 


Yoshiho Gotoh 


Japanese 


Residence/Post Office Address Room 201, 9-17, Higashinkahama 4-chome, Jyoto-ku, Osaka-shi ? Osaka 536 


Japan 
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.. — PTO/SB/54 (12-97) 

Approved for use through 9/30/00. 0MB 0651-0033 
, . inj , j. , Patent and Trademark Office; U.S. DEPARTMENT OF COMMERCE 

Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number 



REISSUE APPLICATION BY THE ASSIGNEE, 
OFFER TO SURRENDER PATENT 



Docket Number (Optional) 



MTS-520US1 



This is part of the application for a reissue patent based on the original patent identified below. 



Name of Patentee(s): 



Mitsuaki Oshima; Yoshiho Gotoh 



Patent Number 
5,761,301 



Title of invention 



Date Patent Issued 
June 2, 1998 



MARK FORMING APPARATUS, METHOD OF FORMING LASER MARK ON OPTICAL DISK 
REPRODUCING APPARATUS, OPTICAL DISK AND METHOD OF PRODUCING OPTICAL DISK 



Matsushita Electric Indu strial Co.. Ltd. is the assignee of the entire interest in the original patent. 
I offer to surrender the original patent. 



X] A certificate under 37 CFR 3.73(b) is attached • 



1 am authorized to act on behalf of the assignee. 



hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these statements 
were made with the knowledge that willful false statements and the like so made are punishable by 
fine or imprisonment, or both, under 18 U.S.C. 1001 and that such willful false statements may 
jeopardize the validity of the application, any patent issued thereon, or any patent to which this 
declaration is directed. 



Name of assignee 
Matsushita Electric Industrial Co., Ltd. 



Signature of person signing for assignee 



Date 



June 26, 2000 



Typed or printedjac^f and title of person signing for assignee 
Qsamu Yamazaki, Director 



Burden Hour Statement: This form is estimated to take 0.1 hours to complete. Time will vary depending upon the needs of the 
individual case. Any comments on the amount of time you are required to complete this form should be sent to the Chief 
Information Officer, Patent and Trademark Office, Washington, DC 20231. DO NOT SEND FEES OR COMPLETED FORMS 
TO THIS ADDRESS. SEND TO: Assistant Commissioner for Patents, Washington, DC 20231. 



Under the Paperwork Reduction Act 




PTO/SB/53 (12-97) 

^v>^ Approved for use through 9/30/00. OMB 0651-0033 

3Wp " Patent and Trademark Office; U S. DEPARTMENT OF COMMERCE 

persons are required to respond to a collection of information unless it displays a valid OMB control number. 



REISSUE APPLICATION BY THE INVENTOR 
OFFER TO SURRENDER PATENT 



Docket Number (Optional) 
MTS-520US1 



This is part of the application for a reissue patent based on the original patent identified below. 



Name of Patentee(s) 



Mitsuaki Oshima; Yoshiho Gotoh 



Patent Number 



5,761,301 



Date Patent issued 



June 2, 1998 



Title of invention MARK FORMING APPARATUS, METHOD OF FORMING LASER MARK ON OPTICAL DISK 
REPRODUCING APPARATUS, OPTICAL DISK AND METHOD OF PRODUCING OPTICAL DISK 



I am the inventor of the original patent 
I offer to surrender the original patent. 

1 . [x] Filed herein is a certificate under 37 CFR 3.73(b). 

2 rn Ownership of the patent is in the inventor(s), and no assignment of the patent has 
— been made. 

One of boxes 1 or 2 above must be checked. 

The written consent of all assignees owning an undivided interest in the original patent is included in 
this application for reissue. 



Signature 



Date 

June 26, 2000 



Typed or printed name 
Mitsuaki Oshima 



The assignee owning an undivided interest in said original patent is Matsushita Electric Industrial Co.. Ltd. 
and the assignee consents to the accompanying application for reissue! ' 



I hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these statements 
were made with the knowledge that willful false statements and the like so made are punishable by 
fine or imprisonment, or both, under 18 U.S.C. 1001 and that such willful false statements may 
jeopardize the validity of the application, any patent issued thereon, or any patent to which this 
declaration is directed. 



Name of assignee 

Matsushita Electric Industrial Co., Ltd. 



Signature of person signing for assignee 




Typed or printed 



Date 



June 26, 2000 



title of person signing for assignee 



Osamu Yamazaki , 



Director 



^dividua^^ 51 An^rn^ J^/n^th! SmSSS^ \ 9 take QA hours - t0 . Time will vary depending upon the needs of the 

naiviauai case. Any comments on the amount of time you are requ red to comDfete this form should he <*pn1 to fhp rhipf 

W*fe%ffWW, ( ? llie ' Washington, DC 20231 ~0 P NOT SEND ™ EES ^OR COMPLctId FORMS 
TO THIS ADDRESS, SEND TO: Assistant Commissioner for Patents, Washington, DC 20231 ' runm© 



PractitioneFsTJbcKet No, MTS-520US1 



PATENT 



ASSENT BY ASSIGNEE FOR FILING OF REISSUE APPLICATION 



This is part of the application for a reissue patent filed herewith based on the original patent identified 
as follows: 

Name of Patentee: Matsushita Electric Industrial Co., Ltd. 
Patent Number: 5,761,301 
Date Patent Issued: 06/02/98 

Title of Invention: MARK FORMING APPARATUS, METHOD OF FORMING LASER MARK ON 
OPTICAL DISK, REPRODUCING APPARATUS, OPTICAL DISK AND METHOD OF PRODUCING 
OPTICAL DISK 

I am an assignee owning an undivided interest to the above original patent. 
I assent to the accompanying application for reissue. 
Attached is a "Certificate under 37 C.F.R. section 3.73(b>" 



Matsushita Electric Industrial Co., Ltd. 



Signatureof ^ersgj£s*gtung for assignee 

Osamu Yamazaki 
Director 



Date . June 26, 2000 



(Assent by Assignee for Filing of Reissue Application-page 1 of I) 



MTS-520US1 




PATENT 



IN THE UNITED STATES' PATENT AND TRADEMARK OFFICE 



Applicant: M. Oshima et al. : Art Unit: 

Serial No.: To Be Assigned : Examiner: 

Filed: Herewith 

FOR: MARK FORMING APPARATUS, 

METHOD OF FORMING LASER MARK 

ON OPTICAL DISK, REPRODUCING 

APPARATUS, OPTICAL DISK AND 

METHOD OF PRODUCING OPTICAL 

DISK 



CERTIFICATE UNDER 37 CFR 3.73 (b) 

Assistant Commissioner for Patents 
Washington, D.C. 20231 

SI R.- 
Matsushita Electric Industrial Co., Ltd., a Japanese Corporation 
certifies that it is the assignee of the entire right, title and interest in the patent 
application identified above by virtue of an assignment from the inventor of the 
patent application identified above. The assignment was recorded in the Patent 
and Trademark Office at Reel 7884, Frame 0122, for which a copy thereof is 
attached. 

The undersigned has reviewed all the documents in the chain of 
title of the patent application identified above and, to the best of undersigned's 
knowledge and belief, title is in the assignee identified above. 

The undersigned (whose title is supplied below) is empowered to 
act on behalf of the assignee. 



MSOFHCE_F:\CLIENT\MrS\520USl\RULE373BXIOC 



I hereby declare that-all statementsjnade herejn of my own 
knowledge are true, and that all statements made on information and belief are 
believed to be true; and further, that these statements are made with the 
knowledge that willful false statements, and the like so made, are punishable by 
fine or imprisonment, or both, under Section 1001, Title 18 of the United States 
Code and that such willful false statements may jeopardize the validity of the 
application or any patent issuing thereon. 

Date : June 2 6 , 2 000 



Name : Osamu Yamazaki 



Title 



: Director 



